Data Protection Notice

1. This data protection notice applies to the processing of data by: eTOC GmbH.
Address: Eifflerstraße 43, 22769 Hamburg, Germany.

Phone: +49 40 8420 0400 (Germany); +86 21 5353 7397 (China)

2. Collection and storage of personal data, and nature and purpose of their use

a) Use of the website

When you visit the website, the browser running on your terminal device automatically transmits information to our website server. This information is temporarily stored in a log file. Without you taking any action, the following information is recorded and stored until it is automatically deleted:

  • IP address of the computer initiating the visit,
  • date and time of access,
  • name and URL of the accessed file,
  • website from which access was initiated (referrer URL),
  • quantity of transmitted data in bytes,
  • name of browser being used and, if applicable, your computer’s operating system and the name of your access provider.

We process the forenamed data for the following purposes:

  • to ensure that the connection to the website is established smoothly,
  • to ensure that our website is user-friendly,
  • to evaluate system security and stability, and
  • for further administrative purposes.The legal basis for the processing of data is provided by Art. 6 (1) Sentence 1 point f GDPR (General Data Protection Regulation). Our legitimate interest arises from the purposes for which the data are collected as per the above list. In no event do we use the collected data for the purpose of inferring anything about your person.

When you visit our website, we also use cookies and analysis services. For further information on this subject, see below under Clauses 4 and 5.

b) Registering for information about our firm, newsletters and events

If you have explicitly granted consent pursuant to Art. 6 (1) Sentence 1 point a GDPR or if one of the other elements of Art. 6 (1) Sentence 1 GDPR is satisfied, we use your email address to regularly send you information about our firm, newsletters and invitations to events. To receive information about our firm, newsletters and invitations, you need to state only your name and an email address. You can cancel your registration at any time, for example by following the link provided at the end of every newsletter. Alternatively you can send a request to cancel your registration at any time by emailing to

c) Using our contact form

If you have a query on any subject, we invite you to contact us using the form on our website. We need you to state a valid email address, so that we can identify the originator of the inquiry and respond to the matter in question. The disclosure of other details is voluntary. The processing of data for the purpose of enabling you to contact us takes place pursuant to Art. 6 (1) Sentence 1 point a GDPR on the basis of your freely granted consent. The personal data collected by us to facilitate use of the contact form are automatically deleted once your query has been resolved.

Your personal data – in particular, name, email address, telephone number and address as appropriate – and any attachments will be forwarded automatically to an internal email address called up by our employee responsible for the online form in question.

All the employees who process data are obliged to keep your data strictly confidential, even if they no longer work for our company. Under no circumstances will your data be passed on to third parties. It will be processed exclusively in Germany.

The personal data that you provide online will be collected, stored, processed and used solely in connection with your request. We will not process or use your data for other purposes without your express prior consent.

By using this online service, you expressly agree to our above-mentioned collection, forwarding and use of the data that you provide online. Your prior consent will be recorded. You may revoke this prior consent at any time with immediate effect by sending an email to the particular registration address without giving any reasons. Your data will then be deleted immediately.

3. Transfer of data

Your personal data are not transmitted to third parties for any purposes other than those specified below. We transfer your personal data to third parties only if:

  • you have granted your explicit consent thereto pursuant to Art. 6 (1) Sentence 1 point a GDPR,
  • the transfer is necessary pursuant to Art. 6 (1) Sentence 1 point f GDPR for the establishment, exercise or defense of legal claims and there is no reason to suppose that you have an overriding legitimate interest in your data not being transferred,
  • a legal obligation for the transfer exists pursuant to Art. 6 (1) Sentence 1 point c GDPR, and
  • such a transfer is allowed by law and necessary for conducting contractual relations with you pursuant to Art. 6 (1) Sentence 1 point b GDPR.


We use cookies on our website. These are small files that are automatically created by your browser and stored on your terminal device (laptop, tablet, smartphone or similar) when you visit our website. Cookies do not damage your device or contain any viruses, Trojan horses or other malware.

Cookies are repositories for information arising in connection with the specific device that is in use. This does not mean, however, that we directly obtain any knowledge of your identity in this way.

One of the reasons we use cookies is to enhance user-friendliness. We use session cookies, for instance, to recognize that you have previously visited individual pages of our website. These cookies are automatically deleted when you leave the website.

Likewise for the purpose of enhancing user-friendliness, we also use temporary cookies, which are stored on your device for a specific defined period. If you visit our website again in order to use our services, these cookies automatically recognize both your previous visit and the inputs and settings you made so as to avoid having to repeat them.

We additionally use cookies to record statistics about the use of our website and for the purpose of enhancing our offering to you (see Clause 5). When you revisit our website these cookies enable us automatically to recognize that you have been with us on a previous occasion. They are deleted automatically upon expiry of a defined period.

The processing of data by way of cookies is necessary for the specified purposes of the legitimate interests pursued by us or by a third party pursuant to Art. 6 (1) Sentence 1 point f GDPR.

Most browsers accept cookies automatically. You can configure your browser, however, to prevent cookies being stored on your computer or to trigger a warning each time a new cookie is about to be created. If you block cookies completely, you may not be able to use all the functions of our website.

5. Analysis tools

Insofar as we use analytical measures, they are performed on the basis of Art. 6 (1) Sentence 1 point f GDPR. By way of the adopted analytical measures, we seek to ensure that our website reflects users’ needs and is continuously improved. We also employ the measures to record statistics about the use of our website and for the purpose of enhancing our offering to you. These interests are to be regarded as legitimate within the meaning of the forenamed provision.

We currently use the tracking tool Jetpack on the website (and its sub-pages), which, in conjunction with the use of WordPress to produce and update blogs, records the number and timing of visits to individual blogs. The collected data serve only the purposes of statistical analysis and improving the website; in particular, we evaluate the data in order to make the blogs more interesting and easier to find.

6. Social media

On our website we generally do not use any plug-ins belonging to the social networks Twitter, LinkedIn, XING or WeChat. We use links to the social networks Twitter, LinkedIn, XING and WeChat in a way that does not establish any direct connection between your browser and the server of the social network concerned. The symbols of the relevant social networks appearing on our websites are simple links to our own pages on these networks. Responsibility for ensuring operation in compliance with data protection regulations rests with the individual network providers.

If you share content from our website via your social media account, the provider of the network will be able to track your visit on our website. Please note that we do not have comprehensive knowledge of the data transferred during your visit to the social media network provider, or the use made thereof by the provider.

You will find further information on the above in the data protection notices of the social media network providers:

7. Rights of data subjects

You have the right:

  • pursuant to Art. 15 GDPR to obtain from us confirmation as to whether your personal data are being processed. In particular, you have the right to obtain information on the purposes of the processing; the categories of personal data concerned; the categories of recipients to whom your data have been or will be disclosed; the envisaged storage period; the existence of a right to request rectification or erasure or restriction of processing, or to object to such processing; the existence of a right to lodge a complaint; the source of your data if not collected by us; and on the existence of automated decision-making, including profiling, and, in those cases, meaningful information about the particularities of such activities;
  • pursuant to Art. 16 GDPR to obtain from us without undue delay the rectification of inaccurate personal data concerning you held by us, or to have incomplete personal data completed;
  • pursuant to Art. 17 GDPR to obtain from us the erasure of your personal data stored by us unless the processing is necessary for exercising the right of freedom of expression and information; for compliance with a legal obligation; for reasons of public interest; or for the establishment, exercise or defense of legal claims;
  • pursuant to Art. 18 GDPR to demand that we restrict the processing of your personal data if the accuracy of the data is contested by you, the processing is unlawful but you oppose the erasure of the personal data and we no longer need the data, but they are required by you for the establishment, exercise or defense of legal claims; or if you have objected to processing pursuant to Art. 21 GDPR;
  • pursuant to Art. 20 GDPR to receive your personal data, which you have provided to us, in a structured, commonly used and machine-readable format, or to demand their transmission to another controller;
  • pursuant to Art. 7 (3) GDPR at any time to withdraw your consent given to us. In consequence of withdrawal, we shall no longer be allowed to process the data in future on the basis of such consent; and
  • pursuant to Art. 77 GDPR to lodge a complaint with a supervisory authority. For this purpose you can, as a general rule, address your complaint to the supervisory authority in the place of your habitual residence, your place of work, or the place where our firm has its registered office.

8. Right to object

If your personal data are being processed on the basis of legitimate interests pursuant to Art. 6 (1) Sentence 1 point f GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR on grounds relating to your particular situation, or if the objection relates to direct marketing. In the second of these two cases, you have a right to object in general without invoking a particular situation and we shall comply with the objection. If you wish to exercise your right to withdraw consent or object, simply send an email to

9. Data security

When you visit our website we use the widely adopted protocol secure sockets layer (SSL) in conjunction with the highest encryption level supported by your browser. As a general rule, 256-bit encryption is supported. If your browser is incompatible with a 256-bit key, we revert to the 128-bit v3 technique instead. The open or closed lock or padlock symbol displayed on the browser page or further information contained in the properties of the browser show whether or not the data constituting our website are encrypted during their transmission.

In other respects we take suitable technical and organizational security measures to protect your data against coincidental or intentional manipulation, partial or complete loss, destruction, and unauthorized access by third parties. We continuously improve our security measures in keeping with technological progress.

10. Currency and revision of this data protection notice

This is the currently applicable version of the data protection notice as of May 2018. The evolution of our website and services offered by way of same, as well as changes to statutory or official requirements, can make it necessary for us to revise this data protection notice from time to time. You can retrieve and print the currently valid version of the data protection notice from the website.