ÉCLAT Compliance

Privacy notice

Controller

ÉCLAT GmbH, Ruhberg 9, 35463 Fernwald, Germany, compliance@eclat.de.

Purpose and legal basis

The portal supports cooperation with business partners on product safety (safety assessments, product information files, safety data sheets). We process account data (name, email address, organisation, language), sign-in data (password hash, authenticator secret, sessions), log data (time, IP address, browser for sign-in, download and upload) and the uploaded documents. Legal basis: Art. 6(1)(b) GDPR (performance of a contract) and Art. 6(1)(f) GDPR (security of the portal, documentation duties under the Cosmetics and CLP Regulations).

Recipients

Hosting by Hetzner Online GmbH (data centre in Germany). Emails are sent via Microsoft 365 (Microsoft Ireland Operations Ltd.). No other disclosure to third parties.

Retention

Account data until the cooperation ends, log data 24 months, uploaded documents as long as they are needed for product files and statutory documentation duties (at least ten years after the last placing on the market).

Cookies

Only one strictly necessary session cookie is set. There is no tracking and no analytics.

Your rights

You have the right of access, rectification, erasure, restriction, data portability and objection, and the right to lodge a complaint with a supervisory authority (competent: the Hessian Commissioner for Data Protection and Freedom of Information).