Data protection notice
Below you will find information about which personal data we process, for what purpose, on what basis, for how long:
A. Our contact details and general information on data processing by us
A.1 Name and contact details of the person responsible
Responsible in terms of data protection law for the collection and use of personal data is
Am Hasenbiel 6
represented by the managing director Ramona Maurer
Phone: +49 (0)7244 626 94-0
Further information about our company can be found in the imprint on our homepage at https://www.emtrion.de/en/imprint.html.
A.2 Contact details for the controller's data protection officer
You can contact our data protection officer as follows:
Mr. Johann Berger
Phone: +49 7222 157 99 12
A.3 Legal basis for the processing of personal data
In general, the following applies to the processing of personal data by us:
- Insofar as we obtain your consent for the processing of personal data, Article 6 (1) (a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis for the processing of personal data.
- When processing personal data that is required to fulfill a contract with you, Art. 6 Para. 1 Letter b) GDPR serves as the legal basis. This also applies even if the processing is necessary for the implementation of pre-contractual measures, so for example with orders, proposals, contract negotiations.
- Insofar as the processing of personal data is necessary to fulfill a legal obligation to which we are subject, Article 6 (1) (c) GDPR serves as the legal basis.
- In the event that your vital interests or those of another natural person require the processing of personal data, Art. 6 Paragraph 1 Letter d) GDPR serves as the legal basis.
- If the processing of your personal data is necessary for the performance of a task that is in the public interest or takes place in the exercise of official authority that has been transferred to us, this is done on the basis of the legal basis of Art. 6 Paragraph 1 Letter e) GDPR.
- If processing is necessary to safeguard a legitimate interest of us or a third party and your interests, fundamental rights and freedoms do not outweigh this interest, Article 6 (1) (f) GDPR serves as the legal basis for processing.
A.4 General information on data deletion and storage duration
We generally delete or block personal data as soon as the purpose of storage no longer applies. Storage can also take place if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which we as the person responsible are subject. The data will also be blocked or deleted if a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.
Specifically, this means:
If we process the personal data on the basis of consent to data processing (Art. 6 Paragraph 1 Letter a) General Data Protection Regulation, in short: GDPR), the processing ends with your revocation, unless there is another legal reason for processing the data which is the case, for example, if we are still entitled to process your data for the purpose of fulfilling the contract at the time of revocation (see below in each case).
If we process the data on the basis of our legitimate interests (Art. 6 Paragraph 1 Letter f) GDPR) in the context of a previously made weighing up, we will store it until the legitimate interest no longer exists, the weighing up comes to a different result or you are in accordance with Art. 21 GDPR have effectively lodged an objection (cf. the optically highlighted "Note on special right of objection" under C.).
If we process the data to fulfill the contract, then we store the data until the contract is finally fulfilled and processed and no more claims can be asserted from the contract, i.e. until the statute of limitations begins. The general limitation period according to § 195 BGB is three (3) years. However, certain claims, such as claims for damages, only become statute-barred after 30 years (cf. § 197 BGB). If there is a legitimate reason to assume that this is relevant in individual cases, we will store the personal data for this period. The stated limitation periods begin at the end of the year (i.e. on December 31st) in which the claim arose and the obligee became aware of the circumstances giving rise to the claim and the person of the debtor or would have to do so without gross negligence.
We would like to point out that we are also subject to statutory retention requirements for commercial, tax and accounting reasons. These oblige us to keep certain data, which may also include personal data, for a period of six (6) to ten (10) years as evidence of our proper business activity or bookkeeping. These retention periods take precedence over the above-mentioned deletion obligations. The retention periods also begin at the end of the year in question, i.e. on December 31st.
A.5 Source of Personal Data
The personal data processed by us comes primarily from the data subjects themselves, for example by them
- as a user of our website via the web browser and your device (for example a PC, smartphone, tablet or notebook) to transmit information such as the IP address to us or our web server,
- as interested parties request information material or an offer from us,
- as a customer place an order with us or conclude a contract with us,
- As a press representative, request information material, press releases, statements, etc.,
- as a supplier to supply us with goods as agreed or as a business partner to us for services and the like. provide.
Only in very exceptional cases can the personal data processed by us come from third parties, for example if a person is acting on behalf of a third party.
A.6 Recipients or categories of recipients of the personal data
Your personal data will only be passed on or transmitted to third parties if this is absolutely necessary and permissible for the respective purpose. To whom we pass on data and for what purpose, we explain each time in connection with the data processing described below or in the case of transfers to other EU countries at the end of section B. of this data protection notice.
Categories of recipients can basically be:
- Service provider
- Suppliers, business partners
- Tax consultant
A.7 Contact via email and phone call
You can contact us via various contact channels if you wish. You will also find your email address and telephone number on the website. Even if you write us an email or call us, we inevitably process your personal data. Because at least the personal data transmitted with the e-mail or your phone is stored by us or our systems.
The data will not be passed on to third parties in this context. The data will only be used to process the conversation.
Purposes of data processing: The processing of personal data when transmitted by e-mail or telephone serves us to process your contact and your request. We need your e-mail address or your telephone number in order to be able to answer at all. This is also where the legitimate interest in processing the data lies.
Legal basis for the data processing: The legal basis for the processing of the data is in the presence of a consent according to Art. 6 Para. 1 Letter a) GDPR, which you have given by actively contacting us. If the contact or your request is aimed at concluding a contract, the legal basis for processing is Art. 6 Para. 1 Letter b) GDPR (implementation of pre-contractual measures).
Duration of storage: The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected.
For the personal data sent by email, this is the case when the respective conversation with you has ended, e.g. your request, your concern has been clarified and we have waited a waiting period of up to 3 months afterwards, whether we may have to refer back to your request or the details of the communication. The conversation is ended when it can be inferred from the circumstances that the matter in question has been finally clarified.
In the case of an incoming telephone call or an outgoing call to us, your telephone number or your name / company name stored with your telephone provider as well as the date and time of the call are stored in our telephone system in a so-called ring memory, which overwrites the oldest data with new data. As a rule, this leads to an automatic deletion of data in the telephone system after approx. 3-4 months.
The communication may be subject to a retention obligation from a commercial or tax law perspective, which then takes precedence (cf. the explanations above under “A.4 General information on data deletion and storage duration”).
Opposition and removal option : You have the option at any time to revoke your consent to the processing of personal data or to object to further data processing due to a legitimate interest (see the reference to the special right of objection under C. of this data protection notice). In such a case, the conversation cannot be continued. The revocation of the consent or the objection to further data processing are made possible by informing us (e.g. by email). In this case, all personal data stored in the course of contacting us will be deleted.
A.8 Handling of applicant data
We offer you the opportunity to apply to us (e.g. by e-mail or post). In the following, we inform you about the scope, purpose, and use of your data collected as part of the application process. We assure you that the collection, processing, and use of your data will be carried out by applicable data protection law and all other statutory provisions and that your data will be treated in strict confidence.
Scope and purpose of data collection
When you send us an application, we process your associated personal data (e.g. contact and communication data, application documents, notes taken during interviews, etc.) to the extent necessary to decide whether to establish an employment relationship. The legal basis for this is Section 26 BDSG-neu under German law (initiation of an employment relationship), Art. 6 (1) lit. b DSGVO (general contract initiation) and - if you have given your consent - Art. 6 (1) lit. a DSGVO. The consent can be revoked at any time. Your data will only be passed on within our company to persons who are involved in processing your application. If the application is successful, the data you have submitted will be
will be stored in our data processing systems based on Section 26 BDSG-neu and Art. 6 Para. 1 lit. b DSGVO to implement the employment relationship.
Retention period of the data
If we are unable to make you a job offer, if you reject a job offer or if you withdraw your application, we reserve the right to retain the data you have provided for us based on our legitimate interests (Art. 6 (1) (f) DSGVO) for up to 6 months from the termination of the application process (rejection or withdrawal of the application). The data will then be deleted and the physical application documents destroyed. This storage serves in particular as evidence in the event of a legal dispute. If it is apparent that the data will be required after the 6-month period has expired (e.g. due to an impending or pending legal dispute), the data will not be deleted until the purpose for continued storage no longer applies. Longer storage may also take place if you have given your corresponding consent (Art. 6 (1) a DSGVO) or if legal storage obligations prevent deletion.
Inclusion in the applicant pool
If we do not make you a job offer, it may be possible to include you in our applicant pool. If you are accepted, all documents and information from your application will be transferred to the applicant pool so that we can contact you in the event of suitable vacancies. Inclusion in the applicant pool takes place exclusively based on your express consent (Art. 6 para. 1 lit. a DSGVO).
The provision of consent is voluntary and is not related to the current application process. The data subject may revoke his/her consent at any time. In this case, the data from the applicant pool will be irrevocably deleted, unless there are legal reasons for retention. The data from the applicant pool will be irrevocably deleted no later than two years after consent has been given.
B. Scope of the processing of personal data via our website
B.1 Provision of the website and creation of log files
For technical reasons, our system automatically collects data and information every time the website is accessed. These are saved in the server's log files. It is about:
- Date and time of access,
- URL (address) of the referring website ( referrer ),
- Websites that are accessed by the user's system via our website,
- Screen type, screen resolution of the user,
- retrieved file (s) and notification of the success of the retrieval,
- the internet service provider of the user,
- Browser type and version,
- Operating system and version,
- the anonymized IP address and the Internet service provider of the user.
These data are processed separately from other data. A processing of this data together with other personal data of the user does not take place. It is not possible for us to assign this data to a specific person.
Purpose of data processing: The temporary processing of the data by the system is necessary to enable the content of our website to be delivered to the user's computer. To do this, the user's IP address must be stored for the duration of the session. The storage in log files takes place in order to ensure the functionality of the website. In addition, we use the data to optimize our offer and the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.
Legal basis of the data processing: The temporary storage of the data and the log files takes place on the basis of the legal basis of Art. 6 Paragraph 1 Letter f) GDPR. Our overriding legitimate interest in this data processing lies in the aforementioned purposes.
Duration of storage: The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. If the data is stored in log files, this is the case after seven days at the latest. A beyond storage is possible. In this case, the IP addresses of the users are deleted or alienated so that it is no longer possible to assign the accessing client.
Opposition and removal option: The collection of the data for the provision of the website and the storage of the data in log files is essential for the operation of the website. There is consequently no possibility of objection on the part of the user. However, the user can stop using the website at any time and thus prevent the further collection of the data mentioned.
B.2 Payment processing / data transfer to payment service providers
On our website you have the option to initiate a payment process directly. We use the e-commerce tool Isotope eCommerce from terminal42 GmbH
Marktplatz 9a, CH-3250 Lyss.
To enable your payment to be processed, the payment data collected for this purpose must be passed on to the selected payment service provider. In some cases, the selected payment service providers also collect this data themselves if you create or have already created an account there. In this case, you must log in to the payment service provider with your access data during the ordering process. The data protection declaration of the payment service provider applies in this respect.
B.3 Contact forms and email contact
Our website contains contact forms for various purposes (contact, support, request for a quote), which can be used to contact us electronically. Take this opportunity was , the data entered in the input form is sent to us and saved. The subsequent data processing generally relates to the respective topic that is linked to the contact form.
Mandatory fields are clearly marked with an asterisk. We absolutely need the data that we request as mandatory fields in order to be able to process / answer your request.
At the time the message is sent, the following data is also stored:
- The IP address of the user,
- Date and time of sending.
For the processing of the data, you will be informed again about the data processing during the sending process and you will be referred to this data protection declaration .
Alternatively, you can contact us using the email address provided. In this case, the personal data transmitted with the email will be saved. The information on A.7 applies accordingly.
Purpose of data processing: The processing of the personal data from the input mask is used to process the establishment of contact and to process your request. In the event of contact being made, this also constitutes a legitimate interest in processing the data. The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.
Legal basis for data processing: The legal basis for processing the data is our legitimate interest in data processing in accordance with Art. 6 Paragraph 1 Letter f) GDPR. The legitimate interest lies in the fact that we have to process your data in order to be able to process and, if necessary, answer your inquiry or contact. If the contact or your request is aimed at concluding a contract, the legal basis for processing is Art. 6 Para. 1 Letter b) GDPR (implementation of pre-contractual measures). The legal basis for the processing of the other personal data processed during the sending process is our legitimate interest in data processing in accordance with Art. 6 Paragraph 1 Letter f) GDPR, which consists in preventing misuse of the contact form and ensuring the security of our information technology systems.
Duration of storage: The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. For the personal data from the input mask of the contact form and those that were sent by e-mail, this is the case when the respective conversation with you has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been finally clarified. The communication may be subject to a retention obligation from a commercial or tax law perspective, which then takes precedence (see above under “A.4 General information on data deletion and storage duration”). The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.
Opposition and removal option : You have the option to object to further data processing at any time due to a legitimate interest (see reference to special right of objection under C. of this data protection notice). In such a case, the conversation cannot be continued. You can object to further data processing by sending an informal message to us (e.g. by email). In this case, all personal data stored in the course of contacting us will be deleted.
When calling up individual pages, we use so-called cookies. These are small text files that are stored on your device (PC, smartphone, tablet, etc.). If you call up a website, a cookie can be saved by your browser. This cookie contains a characteristic string of characters that enables the browser to be clearly identified when the website is called up again.
It is also possible that third-party cookies are used. These cookies could also make it possible to analyze users' surfing behavior. If this is the case, we will inform you about this in this data protection information under B. separately, directly with the information about the respective third-party tools (such as analysis tools, plugins, etc.).
Cookies are used to make our website usable or to make it more user-friendly. Some elements of our website require that the calling browser can also be identified after changing pages. The following data is temporarily stored in the cookies:
- language settings
Our content management system Contao also uses technically necessary cookies to enable functions such as the shopping cart function, logging into the administrator area or, if necessary, writing and posting comments for registered visitors (if activated by us). In these cases, the setting of cookies is technically necessary in order to recognize logged-in visitors.
Legal basis for data processing: The legal basis for processing personal data using technically necessary cookies is Article 6 (1) (f) GDPR, i.e. a legitimate interest on our part. Our legitimate interest lies in the purposes mentioned above. The legal basis for the processing of personal data using cookies for analysis purposes is Art. 6 Para. 1 Letter a) GDPR if the user has given his / her consent, otherwise also a legitimate interest on our part due to the stated purposes in accordance with Art. 6 Para. 1 Letter f) GDPR.
Duration of storage: The technically necessary cookies used by us are deleted again after the end of the browser session, i.e. after you close your browser (so-called session cookies). Analysis cookies generally remain on your device and enable us or our service providers (third-party providers) to recognize your browser on your next visit (permanent cookies).
B.5 Use of the Stetic analysis tool
This website uses Stetic , a statistics and analysis service for websites. This software uses "cookies", text files that are stored on your computer and that enable us to analyze your use of the website.
The information collected by the cookie about your use of our website (including your anonymized IP address) is transferred to an external server, possibly abroad, and stored there. Stetic will use this information to evaluate your use of the website, to compile reports on website activity for the website operator and to provide other services relating to website activity and internet usage.
Also Stetic information may transfer to third parties unless required by law or if third parties such data on behalf of the company.
Stetic has undertaken not to associate your IP address with other company data. You can prevent the installation of cookies by setting your browser software accordingly. However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.
The data collected by Stetic will not be used to personally identify the visitor to this website without the consent of the person concerned.
Purpose of data processing: The analysis tool or analysis cookies are used for the purpose of improving the quality of our website and its content. This tells us how the website is being used and enables us to continuously optimize our offer.
Legal basis for data processing: The legal basis for processing personal data is the consent you have given in accordance with Art. 6 Paragraph 1 Letter a) GDPR.
Opposition and removal option: You can prevent the storage of cookies by setting your browser software accordingly; we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent your data from being stored and processed in the future by objecting to the collection of your anonymised visitor data at the URL //www.stetic.com/optout.html?pid=79745.
B.6 Use of YouTube videos on the website
On our site is Java Script code of the company's YouTube, LLC 901 Cherry Ave., reloaded 94066 San Bruno, CA, United States (hereinafter YouTube). YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043-1351, USA. YouTube is an Internet video portal that allows video clips to be posted free of charge and allows other users to view, rate and comment on them. We use YouTube to embed videos on our website. If you're in your browser Java Script enabled and no Java Script blocker installed, your browser will send necessary personal information to YouTube.
By calling up a page on which a YouTube video has been integrated, the user's Internet browser will automatically download the relevant video from YouTube and let it expire .
As part of this process, YouTube and thus also Google receive information about which specific sub-page of our website is visited by the user. If the user is logged in to YouTube at the same time, YouTube recognizes which specific subpage of our website the user is visiting by calling up a subpage that contains a YouTube video. This information is collected by YouTube and Google and assigned to the respective YouTube account of the user.
YouTube and Google always receive information that the respective user has visited our website if the user is logged into YouTube at the same time as accessing our website; this takes place regardless of whether the person concerned clicks on a YouTube video or not. If you do not want this information to be transmitted to YouTube and Google, you can prevent the transmission by logging out of your YouTube account before visiting our website.
YouTube's data protection regulations provide information on the collection, processing and use of personal data by YouTube and Google and can be accessed here: http://www.google.de/intl/de/policies/privacy
Purpose of data processing: YouTube videos are embedded for the purpose of being able to present multimedia content to the user on the website, thereby enhancing and improving the user experience on the website. Since this makes our website more attractive, the use of YouTube also serves our marketing and advertising purposes.
Legal basis for data processing: The legal basis for processing personal data is Article 6 (1) (f) GDPR, i.e. a legitimate interest on our part. Our legitimate interest lies in the above-mentioned purposes.
Duration of storage: You do users themselves on the implementation of necessary for the tool Java Script decide codes on your browser settings. By changing the settings in your internet browser you can run Java Script disable or restrict. Note: If the execution of Java script disabled, can not be more all features of the site will be used in full.
B.7 Encryption of the website and communication
The website and thus the data transmissions via it are encrypted with the https protocol with TLSv1.2 or TLSv1.1.
The e-mail communication between the web server and our internal mail servers takes place exclusively with TLSv1.2 transport encryption.
B.8 Transfer of personal data to a third country (other EU countries)
The intention is to transfer personal data to the United States of America (USA). There is an adequacy decision by the EU Commission, which states that personal data may be transferred to the USA if the recipient has joined the "EU-US Privacy Shield". The personal data will therefore only be transmitted to recipients in the USA who can be shown to have joined the EU-US Privacy Shield.
The intention specifically relates to data transmission to the following companies:
- Google, Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google") as the provider of the Google Maps map service.
- YouTube, LLC 901 Cherry Ave., 94066 San Bruno, CA, USA as the provider of an Internet video portal, from which videos are integrated with us. YouTube, LLC is a subsidiary of Google , Inc.
The companies mentioned have joined the EU-US Privacy Shield and have submitted to a regulation comparable to the EU data protection level. The transfer of data to these companies is therefore generally permitted. In addition, in the case of order processing, corresponding order processing contracts were concluded with these companies to secure the data and our rights to issue instructions.
C. Data Subject Rights
If your personal data is processed, you are the "data subject" and you have the following rights towards us as the person responsible:
C.1 Right to information
You have the right to receive confirmation from us free of charge as to whether we are processing personal data relating to you. If this is the case, you have a right to information about this personal data and to further information, which you can find in Art. 15 GDPR. You can contact us by post or email.
C.2 Right to correction
You have the right to request us to correct any incorrect personal data concerning you without delay. You also have the right - taking into account the purposes of processing mentioned above - to request the completion of incomplete personal data - including by means of a supplementary declaration. You can contact us by post or email.
C.3 Right to erasure
You have the right to request the immediate deletion of your personal data if one of the requirements of Art. 17 GDPR is met. You can contact us by post or email.
C.4 Right to restriction of processing
You have the right to demand that we restrict processing if one of the requirements of Art. 18 GDPR applies. You can contact us by post or email.
C.5 Right to be informed
If you have asserted the right to correction, deletion or restriction of processing against the person responsible, the person responsible is obliged to notify all recipients to whom the personal data relating to you has been disclosed of this correction or deletion of the data or restriction of processing, unless , this turns out to be impossible or involves a disproportionate effort.
You have the right vis-à-vis the person responsible to be informed about these recipients.
C.6 Right to data portability
You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format and you have the right to transmit this data to another person responsible without hindrance from us, if the requirements of Art 20 GDPR are present. You can contact us by post or email.
C.7 Right to object to processing based on legitimate interest and against direct mail
Insofar as we exceptionally process personal data on the basis of Art. 6 Paragraph 1 Letter f) GDPR (i.e. due to legitimate interests), you have the right at any time for reasons arising from your particular situation to object to the processing of your personal data to lodge an objection with us. If we cannot prove any compelling legitimate reasons for further processing that outweigh your interests, rights and freedoms, or if we process your data for direct marketing purposes, we will no longer process your data (see Art . 21 GDPR). You can contact us by post or email.
A technical process that you use is also considered a contradiction in this sense, for example clear technical information that your web browser transmits to us (“Do-Not-Track” message).
If personal data are processed in order to operate direct mail, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct advertising.
C.8 Right of withdrawal if consent has been given
You have the right to revoke your consent to the collection and use of personal data with effect for the future at any time. You can contact us by post or email. This does not affect the legality of the processing carried out on the basis of the consent up to the point of revocation.
C.9 Automated decision-making including profiling
You have the right not to be subject to a decision based solely on automated processing - including profiling - which has legal effects on you or which significantly affects you in a similar manner. Unless the decision is necessary for the conclusion or performance of a contract between you and us, it is permissible on the basis of legal provisions of the Union or of the member states to which we are subject and these legal provisions contain appropriate measures to safeguard your rights and freedoms as well as yours legitimate interests or the decision is made with your express consent.
We do not make such automated decision-making.
C.10 Voluntary provision of the data
If the provision of personal data is required by law or contract, we will always point this out when collecting the data. In some cases, the data we collect is required for the conclusion of a contract, namely when we otherwise cannot or cannot sufficiently fulfill our contractual obligation to you. There is no obligation for you to provide the personal data. However, failure to provide it may mean that we cannot perform or offer a service, action, measure or similar desired by you or that it is not possible to conclude a contract with you.
C.11 Right to lodge a complaint with a supervisory authority
Without prejudice to other rights, you have the right to lodge a complaint with a supervisory authority for data protection, in particular in the member state of your place of residence, your place of work or the place of the alleged infringement, if you are of the opinion that the processing of your personal data is contrary to data protection law violates.
Responsible for us is:
The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg
Website: www.baden-wuerttemberg.datenschutz.de .
Status of our data protection information: 04/19/2021