General statement
With this Privacy Policy, we inform you about the type, scope, and purpose of the processing of personal data on our website and within the framework of our business and educational services.
Personal data refers to any information relating to an identified or identifiable individual, such as name, address, telephone number, email address, or user behaviour.
The processing of your personal data is carried out exclusively in accordance with applicable legal regulations.
DATA CONTROLLER
Eichbaum GmbH
Represented by Managing Director Matthias J. Augsburg
Lange Str. 19
58636 Iserlohn
Germany
Phone: +49 (0) 2304 9384556
Email: info@eichbaum-institut.de
Imprint:
https://fincasesfigueres.com/impressum/
PROCESSING OF PERSONAL DATA
We process personal data only to the extent necessary to provide our website, services, and communication with you.
This includes in particular:
- Master data (e.g. name, address)
- Contact data (e.g. email address, phone number)
- Contract data
- Payment data
- Usage data
- Communication data
The processing is carried out for the following purposes:
- Handling inquiries
- Pre-contractual measures
- Contract performance
- Provision of educational and training services
- Customer communication
- Invoicing and accounting
- Ensuring the security and stability of our website
Legal bases for processing:
- Art. 6 (1) (a) GDPR (consent)
- Art. 6 (1) (b) GDPR (contract / pre-contractual measures)
- Art. 6 (1) (c) GDPR (legal obligation)
- Art. 6 (1) (f) GDPR (legitimate interest)
SPECIAL CATEGORIES OF PERSONAL DATA
Within our educational and training services, it may be necessary to process special categories of personal data pursuant to Art. 9 GDPR, such as health data or information revealing religious or ideological beliefs.
Such data is processed only:
- with your explicit consent,
- for the provision of training services,
- to protect vital interests,
- or due to legal obligations.
YOUR RIGHTS UNDER GDPR
You have the following rights:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR)
- Right to withdraw consent at any time
- Right to lodge a complaint with a supervisory authority
COOKIES AND CONSENT MANAGEMENT
Our website uses cookies.
Strictly necessary cookies are processed on the basis of our legitimate interest pursuant to Art. 6 (1) (f) GDPR to ensure the functionality and security of the website.
All other cookies, in particular analytics, statistics, or marketing cookies, are only used with your explicit consent pursuant to Art. 6 (1) (a) GDPR.
You may withdraw or adjust your consent at any time via our cookie banner.
COOKIES AND CONSENT MANAGEMENT
We use cookies and similar technologies to provide our website, analyse its usage, and integrate external services (e.g. booking platforms such as Airbnb).
In doing so, personal data (e.g. IP address, usage behaviour, technical information) may be processed and transferred to third parties, including countries outside the European Union.
Processing is partly based on your consent pursuant to Art. 6 (1) (a) GDPR.
You may withdraw your consent at any time via the cookie settings on our website. The lawfulness of processing prior to withdrawal remains unaffected.
HOSTING
Our website is hosted by:
Alfahosting GmbH
Ankerstraße 3b
06108 Halle (Saale)
Germany
More information:
https://alfahosting.de/datenschutz/
A data processing agreement pursuant to Art. 28 GDPR has been concluded with the hosting provider.
SERVER LOG FILES
When you visit our website, information is automatically collected and stored in server log files.
This includes:
- IP address
- Date and time of request
- Browser type and version
- Operating system
- Referrer URL
- Visited pages
Processing is based on our legitimate interest pursuant to Art. 6 (1) (f) GDPR to ensure the security and stability of our website.
CONTACTING US
If you contact us via email, phone, contact form, or otherwise, we process your data to handle your request.
Legal bases:
- Art. 6 (1) (b) GDPR
- Art. 6 (1) (f) GDPR
10. SSL / TLS ENCRYPTION
For security reasons and to protect confidential content, our website uses SSL/TLS encryption.
You can recognise an encrypted connection by “https://” in your browser’s address bar and the padlock symbol.
SSL / TLS ENCRYPTION
For security reasons and to protect confidential content, our website uses SSL/TLS encryption.
You can recognise an encrypted connection by “https://” in your browser’s address bar and the padlock symbol.
11. SOCIAL MEDIA
We maintain online presences on social networks to communicate with customers and interested parties.
Personal data may be processed by the respective platform operators.
For more information, please refer to their privacy policies:
Facebook / Instagram (Meta):
https://privacycenter.instagram.com/
https://www.facebook.com/privacy/policy/
X (formerly Twitter):
https://twitter.com/privacy
XING:
https://privacy.xing.com/en/privacy-policy
LinkedIn:
https://www.linkedin.com/legal/privacy-policy
12. EMBEDDED CONTENT AND SERVICES
When external services are integrated (e.g. videos, maps, fonts), the provider may process your IP address.
This applies in particular to:
- YouTube
- Vimeo
- Google Maps
Such content is only integrated with your consent pursuant to Art. 6 (1) (a GDPR), where legally required.
DATA SECURITY
We implement technical and organisational security measures to protect personal data against loss, manipulation, or unauthorised access.
UPDATES TO THIS PRIVACY POLICY
This Privacy Policy is valid as of May 2026.
We reserve the right to update it if necessary due to legal or technical changes.
ONLINE APPOINTMENT BOOKING (WORDPRESS BOOKING SYSTEM)
We use an online booking system to allow appointment scheduling via our website.
When using this system, the data you enter is processed for the purpose of scheduling and managing appointments.
This may include:
- First and last name
- Email address
- Phone number
- Requested appointment
- Message content
- IP address
- Timestamp of booking
Processing is carried out for the performance of pre-contractual measures and contract fulfilment pursuant to Art. 6 (1) (b) GDPR.
In addition, processing is based on our legitimate interest pursuant to Art. 6 (1) (f) GDPR for efficient appointment management.