Privacy Policy

This privacy and cookie policy is written following EU Regulation 2016/679 (“GDPR”) and it applies to all personal data that EKPI collects online, such as through this website www.ekpifood.de (“Website”), emails, and other online tools and apps, but not to data collected offline.

1. Controller

The company responsible for processing your personal data when you visit this Website is:

Ekpi GmbH
Werner-von-Siemens-Str. 1, 27809 Lemwerder, Germany
dataprotection.ekpi@ekpifood.com

(Hereinafter only “we”, “us”, ourselves” or “EKPI”).

2. Purposes of processing, legal bases and related retention periods

2.1 WEBSITE USAGE

Every time you visit our Website, we collect data automatically transmitted by your browser in order to enable your visit to the website. In particular, this data may include the following:

Domain name or IP address of the requesting device;
Client file request (file name and URL);
http response code;
Date and duration of visit and request;
Browser and operating system;
Online-IDs (e.g. device identifier, Session-IDs);
Address of accessed website and requesting website.

This data must be processed in order to enable you to visit the Website and ensure the uninterrupted functionality and security of our systems.

The legal basis for this data processing is Article 6(1)(b) of the GDPR if the Website is accessed in the course of initiating or performing a contract and furthermore Art. 6 (1)(f) GDPR based on our legitimate interest in enabling the Website to be accessed as well as the permanent functionality and security of our systems.

The data retention period for this data is 180 days.

2.2 LEGAL DEFENSE AND CLAIM MANAGEMENT

Personal data stored for website browsing as described in 3.1 above and/or orders processing as described in 3.3 may also be used in case we have to defend ourselves in a court or because of a claim you may raise against us.

The legal basis for this processing is our legitimate interest pursuant to art. 6(1)(f) GDPR.

Data retention period: 180 days.

2.3 LEGAL OBLIGATION

We may also process your personal data to abide by any legal obligations imposed on us by applicable laws including but not limited to

The legal basis for this processing is our legitimate interest pursuant to art. 6(1)(f) GDPR.

Data retention period: 180 days.

2.4 USE OF COOKIES AND SIMILAR TECHNOLOGIES

This website uses cookies and similar technologies (together “tools”) provided either by ourselves or by third parties.

What is a cookie?

In general, cookies are small files which are stored on your computer, tablet or smartphone to keep track of your visit to the website and your preferences; as you move between pages, and sometimes to save settings between visits. Cookies help the builders of websites gather statistics about how often people visit certain areas of the site, and help in tailoring websites to be more useful and user-friendly.

There may also be other technologies through which the same purposes are pursued as with Cookies.

For example, although Cookies can be used in both web and mobile browsers, it would be inappropriate to talk about Cookies in the context of mobile applications, since these are Tracking Tools that require the presence of a browser. For this reason, within this document the term Cookies is only used to specifically refer to that particular type of Tracking Tool. The same criteria used for Cookies apply to these technologies.

Strictly Necessary Cookies

These cookies are necessary for our Website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. You can set your browser to block or alert you about these cookies, but some parts of the site will not then work. These cookies do not store any personally identifiable information.

Performance/ Analytics Cookies

These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site. All information these cookies collect is generally aggregated. If you do not allow these cookies, we will not know when you have visited our Website, and will not be able to monitor its performance.

Functional Cookies

These cookies enable the Website to provide enhanced functionality and personalisation. They may be set by us or by third party providers whose services we have added to our pages. If you do not allow these cookies then some or all of these services may not function properly.

Cookie Name	First / Third Party?	Type	Storage Period	Short Description
borlabs-cookie	First	Functional	60 days	Stores information regarding consent for service groups and individual services
wf_loginalerted_*	First	Functional	Persistent	Wordfence cookie, for website security
wfls-remembered-*	First	Functional	30 days	Wordfence cookie, for website security
wf-scan-issue-expanded-*	First	Functional	Session	Wordfence cookie, for website security
wfCBLBypass	First	Functional	Session	Wordfence cookie, for website security
wfwaf-authcookie-*	First	Functional	1 day	Wordfence cookie, for website security
_ga	Third – Google	Analytics	2 years	Used to distinguish users
_ga_*	Third – Google	Analytics	2 years	Used to persist session state
MR	Third – Microsoft	Analytics	7 days	Microsoft Clarity is an user behavior analytic tool by Microsoft. We use Microsoft Clarity to understand how users interact with our website.
CLID	Third – Microsoft	Analytics	1 year	Microsoft Clarity is an user behavior analytic tool by Microsoft. We use Microsoft Clarity to understand how users interact with our website.
MUID	Third – Microsoft	Analytics	1 year	Microsoft Clarity is an user behavior analytic tool by Microsoft. We use Microsoft Clarity to understand how users interact with our website.
ANONCHK	Third – Microsoft	Analytics	Session	Microsoft Clarity is an user behavior analytic tool by Microsoft. We use Microsoft Clarity to understand how users interact with our website.
_clck	Third – Microsoft	Analytics	1 year	Microsoft Clarity is an user behavior analytic tool by Microsoft. We use Microsoft Clarity to understand how users interact with our website.
SM	Third – Microsoft	Analytics	Session	Microsoft Clarity is an user behavior analytic tool by Microsoft. We use Microsoft Clarity to understand how users interact with our website.
_clsk	Third – Microsoft	Analytics	1 day	Microsoft Clarity is an user behavior analytic tool by Microsoft. We use Microsoft Clarity to understand how users interact with our website.

How to control and deactivate cookies

Most browsers are set so that they automatically accept cookies. You may however, deactivate the storage of cookies or set your browser in a manner that it will notify you as soon as cookies are set.

Instructions on how to deactivate cookies:

For Chrome:

On your computer, open Chrome.
At the top right, click More More and then Settings Settings.
Click Privacy and security and then Cookies and other site data.
Click See all site data and permissions and then Clear all data.
To confirm, click Clear.

For Safari:

Tap Settings > Safari
Turn on Block All Cookies.

For Microsoft Edge:

To change your level of tracking prevention, clear your browsing data, help improve Microsoft Edge, and more, select Settings and more > Settings > Privacy, search, and services.
To choose if websites can ask for permission to use your location, camera, microphone, and more, select Settings and more > Settings > Site permissions.
To choose what types of data are synced across your devices, or to turn off syncing entirely, select Settings and more > Settings > Profiles > Sync.

For Microsoft Internet Explorer 8.0 and more:

Go to “Tools” menu, then “Internet Options”
Click on “Confidentiality”
Select your preferred level of confidentiality

For Mozilla Firefox:

Go to “Tools” then “Options” menu
Click on the “Privacy” settings
Select your preferred option on the “Cookie” menu

For Opera:

Go to “Files” > “Preferences”
Click on “Privacy”
Select your preferred options

For Android browser:

Click on the upper right button
Go to “Settings” then “Privacy & security menu”
Select your preferred option

4. Who do we share your personal information with?

In some cases, we transfer your personal data to third parties. The types of third parties with whom we share personal information are described below:

Other DKSH Group companies

We may share your personal data with other companies belonging to the DKSH Group, including our parent company DKSH Holding, who may use your personal information for purposes and in a manner consistent with the information set out in this privacy statement.

Service providers

We may disclose your personal data to companies that provide services to us and other members of the DKSH Group. Examples of the types of service providers we work with include:

IT companies that operate the websites on our behalf,
Delivery companies, such as couriers, that deliver our products to you,
Direct marketing companies who help us manage our electronic communications with you,
Customer services companies who operate and manage our call centers,
Payment service providers who manage our online payments where you purchase products through our Sites, and

Our service providers are required to keep your personal data confidential and are not allowed to use it for any other purpose than to carry out the services they are performing for us

Third parties where required by law

We may disclose your personal data to a third party if it is necessary to comply with a legal obligation or the decision of a judicial authority, a public authority or a government body or if disclosure is necessary for national security, law enforcement or other issues of important public interest.

Business partners

We may share your personal data with our business partners for their own purposes if it is necessary for providing products and services to you.

We may also transfer your personal data to third parties for their direct marketing purposes but only where you have given your consent at the time you supply your personal data.

We may also share your user profile data for online advertising purposes with our third-party advertising and analytics partners including organisations which we collaborate with on advertising campaigns and various advertising platforms.

Professional advisors

We may disclose personal data to professional advisors, such as lawyers, auditors and insurers, as necessary in the course of the professional services they provide us with.

Third parties in connection with a business sale

If we make a sale or transfer of assets or are otherwise involved in a merger or business / asset transfer, we may transfer your personal data to one or more third parties as part of that transaction. If a change happens to our business, the new owners may use your personal data in the same way as set out in this privacy notice.

Other third parties with your consent

We may also share your personal data with other third parties when you consent to such sharing.

5. TRANSFER OF DATA TO THIRD COUNTRIES

Personal data are generally located within the European Union and Switzerland.

If we transfer your personal data outside the EU, Switzerland or your country of residence, as applicable, we will take steps to ensure that your data will receive the same level of protection as if it was being processed within the EU, Switzerland or your country of residence, as applicable. For example, we may include standard contractual clauses adopted by the European Commission in our contracts with third parties or our group companies to ensure there are safeguards in place to protect your personal data.

6. YOUR RIGHTS

You have a right of access to information about how we process your personal data at any time. We will explain our data processing procedures to you and provide you with a summary of the personal data concerning you that we hold.

If data we have stored is incorrect or obsolete, you have the right to have this data rectified (right to rectification).

You may also request the erasure of your data (right to be forgotten). The erasure of your data is generally only possible if certain conditions are met and/or if the data is no longer required, if the processing is not lawful, or in the case of other reasons pursuant to Article 17 of the GDPR. If, in exceptional cases, erasure is not possible due to other legal regulations, the data will be blocked – provided the necessary conditions are met – so that it is only available for this legal purpose. You may also restrict processing of your personal data if, for example, you have doubts about the accuracy of this data (right to restriction).

Under certain conditions, you also have the right to data portability, i.e. on request we will send you a digital copy of the personal data concerning you that you have provided to us.

In order to assert your rights described here, you may contact us at any times using the contact details given above. This also applies should you wish to obtain copies of guarantees to prove an adequate level of data protection.

Your requests regarding your assertion of data protection rights and our replies to these requests will be stored for documentation purposes for a period of two years and, in some cases in relation to the assertion, exercise, or defense of legal claims, for a longer period. The legal basis is Article 6(1)(f) of the GDPR, based on our legitimate interest in defending against possible civil law claims pursuant to Article 82 of the GDPR, the avoidance of administrative fines pursuant to Article 83 of the GDPR, and compliance with our accountability obligations pursuant to Article 5 of the GDPR.

You have the right to withdraw consent once given to us at any time. As a result, we will not continue to process data based on this consent in the future. Withdrawal of consent will not affect the lawfulness of the processing carried out on the basis of the consent prior to withdrawal.

If we process your data on the basis of legitimate interests, you have the right to object to the processing of your data on grounds relating to your particular situation at any time. Should you object to data processing for direct marketing purposes, you have a general right to object, which we shall comply with even if you do not state any reasons for your objection.

Should you wish to exercise your right to withdraw or object, simply send an informal email to the contact details given above.

Finally, you have the right to file a complaint with the data protection supervisory authority. You may exercise this right before a supervisory authority in the Member State in which you are staying, working, or in the place of the alleged infringement.

Version 1.0

Last amended: February 2025