DATA PRIVACY NOTICE FOR OUR CUSTOMERS, OUR SUPPLIERS AND OTHER THIRD PARTIES This Data Privacy Notice (“Notice”) describes how euNetworks Group Limited and its group entities and subsidiaries (available at eunetworks.com/companies/ or eunetworks.de/firmeninformation/) (“euNetworks” or “us” or “our”) collects and uses Personal Data provided by our customers, our suppliers and other third parties (“you” or “your”) about individuals (“External Individuals”), during and after our business relationship with euNetworks, in accordance with the General Data Protection Regulation (GDPR).euNetworks Group Limited and its entities and subsidiaries act as controllers for the purposes of this Notice. This Notice does not form part of any contract (such as a Master Services Agreement, Customer Order, supplier order) between euNetworks and you. We may update this Notice at any time but if we do so, we will provide you with an updated copy of this Notice on our website as soon as reasonably practical. euNetworks usually contracts with businesses and those businesses will provide us with Personal Data about individuals within their organisations (External Individuals). We assume that you are providing consent for us to collect and process External Individuals’ Personal Data in accordance with this Notice or, that as an External Individual, you provide this consent. It is important that you read and retain this Notice and pass it on to any External Individuals in respect of whom we are collecting or processing Personal Data, so that you and they are aware of how and why we are using such information and what their rights are under the data protection legislation. We have a separate Privacy Policy in respect of individuals who work for euNetworks and this Notice does not apply to them.
“Personal Data” is any information related to a “real” person that can be used to directly or indirectly identify the person. This includes Personal Data in a business context, such as work telephone numbers, or email addresses that are tied to individuals.
euNetworks is a provider of bandwidth infrastructure services. We focus on delivering scalable, fibre-based products and solutions. When our customers use our services, the data that they transmit is not in a form that allows any individuals to be identified. Accordingly, notwithstanding the underlying content of that data, no Personal Data is processed by us. We will not take any steps to identify any individuals whose data is contained in the data transmitted by or customers. Accordingly, we are not a data controller or data processer in respect of this data (even if it includes Personal Data) and such data is not within the scope of this Notice. When you provide Personal Data relating to External Individuals to us so that we can provide services to you, use your services or otherwise undertake business with you, we have a legitimate business interest in processing that Personal Data and also consider that you have provided consent on behalf of such External Individuals for us to do so.
The types of Personal Data that you are likely to provide to us in respect of External Individuals are as follows:
Other Personal Data may be required in limited circumstances, for example to arrange entry to datacentres or other locations.
euNetworks collects and obtains Personal Data about External Individuals when this data is provided to us in the course of our business. This may include when you contact us by email or telephone, when you provide contact details in a contract, when you register to use our portal or when you meet with us. External Individuals may also sign up to receive newsletters or other contact from us.
euNetworks may use Personal Data to:
euNetworks and such subcontractors as are required to contact External Individuals have access to Personal Data as is required to enable them to assist us in providing our services. We do not provide Personal Data to third parties for any other reason.
The accuracy of all information is important to euNetworks. If any of the Personal Data provided changes, please advise us and we will update this. If you have questions over the Personal Data held, please ask us.
Subject to the GDPR, the External Individuals’ legal rights are:
You also have the right to complain to a data protection supervisory authority about the processing of your Personal Data by euNetworks. In some cases, it will be necessary to provide evidence of identity before we can give effect to these rights. These rights are subject to our rights to retain data as required to run our business and to comply with our obligations. If any of your External Individuals withdraw consent to use their Personal Data, you will need to provide us with alternative contact details.
When External Individuals give euNetworks Personal Data, euNetworks take steps to ensure that it’s treated securely. euNetworks has implemented technical and organisational security measures to ensure the compliance of security of Personal Data under GDPR and to protect Personal Data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, unauthorised access, and other unlawful or unauthorised forms of processing. The details of your user account are protected by a password for this purpose. In all sensitive areas, SSL encryption technology is used in the transmission of data. If you wish to contact euNetworks via e-mail, we point out that the confidentiality of the transmitted information cannot be guaranteed. The content of emails can be viewed by third parties. It is therefore advisable to provide confidential information only by post.
In providing services to you, it may from time to time be necessary for us to transfer Personal Data to partners outside the European Economic Area (“EEA”). External Individuals’ rights will not be affected by this and euNetworks will take all reasonable steps to ensure that all Personal Data transferred outside the EEA is treated in accordance with this Privacy Notice and with the same level of protection required by data protection legislation (for example by using EU Standard Model Clauses). By providing us with Personal Data you accept that you have no objection to such transfer, processing or storage.
euNetworks keeps Personal Data for no longer than is necessary for the business purposes for which the Personal Data is processed. This means we will delete Personal Data from our IT systems after the relevant business relationship ends and the period for which we are required to hold information expires. If an External Individual unsubscribes from our mailing list, we will remove their details immediately.
Controller
euNetworks is a company group in which certain departments and tasks are shared between different companies in the group. The department responsible for the operation of this website is shared between the euNetworks GmbH, Theodor-Heuss-Allee 112, 60486 Frankfurt and euNetworks Holdings Limited, 5 Churchill Place , London E14 5HU, United Kingdom (both jointly “euNetworks”) which act as joint controllers according to Art. 4 No. 7 and Art. 26 GDPR. Both companies comply with GDPR requirements and you can reach out to either one of them in case of any questions or inquiries. We also refer to our legal notice, available at eunetworks.com/legal-notice/ or eunetworks.de/impressum/
We store this data on our servers. We use this data and store log-files to deliver our website to you, to ensure the security of our information technology systems, to review use of our website and to improve our products and services. We do not use this data for marketing purposes and delete log-files within 7 days. The processing is based on our legitimate interests.
Unless otherwise stated, the processing described in this section is based on your consent. Learn more about how to withdraw your consent in our Cookie Policy. Our cookie policy is linked in the footer of our website.
(1) Google Analytics This website uses Google Analytics of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Holding Company: Google LLC 1600 Amphitheatre Parkway Mountain View, CA 94043, USA) to analyse the usage of our web services. The collected data is used to optimise our website and our advertising effort. Google Analytics is a web-analysing-service provided by Google. Google processed this data on our behalf and is contractually bound to implicate measures to ensure the integrity and confidentiality of the data.
Upon visiting our website, the following data is processed:
The legal basis is your consent. Upon the first visit to our website, we ask for your consent. Consent may be withdrawn at any time. This can be done by using our consent manager or by deleting the cookies in your browser. Another possibility is the browser addon provided by google, which deactivates Google Analytics. You can download it here: https://tools.google.com/dlpage/gaoptout?hl=dehttps://tools.google.com/dlpage/gaoptout?hl=de
Insofar as Google Ireland Limited transfers personal data to the US parent company Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, Google guarantees by means of standard contractual clauses to maintain the EU level of data protection. Google Analytics sets cookies in your browser for the duration of two years from your last visit. These cookies contain a randomly generated User-ID, with which you can be recognised upon your next visit. The recorded data is stored in combination with the randomly generated User-ID, which makes an analysis of pseudonymised user profiles possible. This data will be automatically deleted after 14 months. Other data is stored in aggregated form indefinitely.
(2) Google Tag Manager Together with Google Analytics we use the Google Tag Manager of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Holding Company: Google LLC 1600 Amphitheatre Parkway Mountain View, CA 94043, USA). The Tag Manager allows us to place and administrate small code elements called “tags” via an interface. The tool itself does not process any personal data itself. Google Tag Manager enables the activation of tags, which allows other services to collect data, but does not access the data itself.
Further information about the Google Tag Manager can be found here: https://www.google.com/intl/de/tagmanager/faq.html
(3) Hotjar This website uses Hotjar (Service Provider: Hotjar Ltd, St Julians Business Centre, Elia Zammit Street 3, St Julians STJ 3155, Malta, Europa), to better understand our users’ needs and to optimise this service and experience. Hotjar is a technology service that helps us better understand our users’ experience (e.g. how much time they spend on which pages, which links they choose to click, what users do and don’t like, etc.) and this enables us to build and maintain our service with user feedback. Hotjar uses cookies and other technologies to collect data on our users’ behaviour and their devices. This includes a device’s IP address (processed during your session and stored in a de-identified form), device screen size, device type (unique device identifiers), browser information, geographic location (country only), and the preferred language used to display our website. Hotjar stores this information on our behalf in a pseudonymised user profile. Hotjar is contractually forbidden to sell any of the data collected on our behalf.
The legal basis is your consent. Upon the first visit to our website, we ask for your consent. Consent may be withdrawn at any time. This can be done by using our consent manager or by deleting the cookies in your browser. According to Hotjar, the data will only be retained for as long as is necessary for the purpose(s) for which we originally collected it or as required by law. Hotjar is contractually forbidden to sell any of the data collected on our behalf. For further details, please see https://www.hotjar.com/legal/policies/privacy/.
b) Online advertising based on Tracking and Retargeting
We would like to show you – also on the websites of our advertising partners – only advertising that really interests you. Therefore, we use the technologies of so-called tracking and retargeting on our website for advertising that is tailored to your interests. Cookies are usually used for this purpose, but other technologies such as so-called “fingerprinting” are also used in some cases. The cookies temporarily stored for this purpose enable our retargeting partners to recognise visitors to our website under a pseudonym and to display only products that are likely to interest you. Fingerprinting recognizes your device based on your computer hardware, software, add-ons and browser settings.
Unless otherwise stated, the processing described in this section is based on your consent. Learn more about how to withdraw your consent in our cookie policy. There you will find information on when cookies expire and how to delete cookies. Our cookie policy is linked in the footer of our website.
In detail, we use the data collected for statistical and advertising purposes
Unless otherwise stated, we use the following services as processors and contractually oblige them to process data only on our behalf.
(1) Google DoubleClick DoubleClick by Google (“DoubleClick”) is a service by Google Ireland Limited Gordon House, Barrow Street, Dublin 4, Ireland (parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). DoubleClick uses cookies to display most relevant advertisements. Google keeps track of the advertisements you have seen and which of them you have actually viewed. Using the DoubleClick cookies allows Google and its advertising network to serve advertisements based on your previous web page visits (or even apps). Google will transmit information generated by the cookies to a Google server for analysis and storage. You can prevent cookies from being saved by setting your browser software accordingly.
For more detailed information on the terms and conditions of use and data protection, please visit: https://www.google.com/analytics/terms/de.html or https://www.google.com/intl/de/analytics/privacyoverview.html.
(2) Google Ads We use Google Ads, an ad service by Google Ireland Limited Gordon House, Barrow Street, Dublin 4, Ireland (parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA), and also conversion tracking as part of Google Ads. Google Ads stores a conversion tracking cookie on your computer’s hard drive (“conversion cookie”) when you click on an advertisement placed by Google. If you visit certain pages of our website, Google can recognise that you have clicked on the advertisement and were referred to this web page.
The information obtained using conversion cookies is used to generate statistics for Ads customers who use conversion tracking. These statistics show us the total number of users who clicked on the Google advertisement and viewed a web page with a conversion tracking tag.
Social Media Services und Plugins We do not use direct plug-ins from social networks on our websites and your use of social networks is governed by their terms.
In the case that your data is transferred to third countries either to Controllers or Processors, the transfer is justified by the EU Standard Contractual Clauses according to the Annex of the Commission Decision 2021/914/EU and/or by concluding International Data Transfer Agreements provided by the ICO. With regard to transfers between the European Union and the United Kingdom, we refer to the adequacy decision of the European Union.
Formal compliance with GDPR is undertaken by euNetworks Group Limited and our local subsidiaries (see eunetworks.com/companies/ or https://www.eunetworks.de/firmeninformation/) also take responsibility. The aforementioned bodies shall jointly determine the purposes and means of processing. You can also see our legal notices: eunetworks.com/legal-notice/ or eunetworks.de/impressum/. If you have any questions about this Notice or how we handle your Personal Data, please contact our Data Protection Officer: RICKERT Rechtsanwaltsgesellschaft m.b.H. (i.e. law firm) Colmantstr. 15, 53115 Bonn, Germany Email: dataprotection@eunetworks.com or datenschutz@eunetworks.com This Privacy Statement was last reviewed and updated in September 2022.