Welcome to elumatec AG, Thank you for your interest in our website and our company. We are fully aware of the importance of protecting your personal data and privacy. To ensure that you are fully aware of how your personal data is collected, processed and used on our websites, please read the following guide. 1. Controller for processing personal data Your data is processed on behalf of elumatec AG Pinacher Strasse 61 75417 Mühlacker Controller and CEO: Nebojsa Wosel Our data protection officer can be contacted via the postal address above or by e-mail at datenschutzbeauftragter@elumatec.com. 2. Anonymous data collection When you access our website, the technology built into your internet browser means that it automatically sends data to our web server. This includes the time and date of your visit, the URL of the referring website, the file retrieved, the type of browser, the operating system and the IP address you used. This data is stored separately from other data that you submit while using our online services. This data is not associated with an individual person. The data is logged to ensure system security and then deleted. 3. Collection and processing of personal data Personal data is only collected and processed if you voluntarily send us your personal data via our website. This can be done as follows: 3.1 Processing data when using our forms You can contact us via our website using our contact forms for sales, press, personnel, service, training and trade fairs. The personal data which is sent to us depends on the respective input mask for these areas that you use when contacting us. The personal data you enter is collected and stored solely for internal use and our own purposes. The respective purposes initially depend on the nature of your query and serve the purposes of • customer acquisition, in particular for written/telephone contact • sending advertising by post and e-mail (if we have your consent to do so) • creating sales statistics (solely for internal use) • forwarding on to your nearest sales/service location • order processing when using our spare parts shop We may arrange for your data to be passed on to one or more processors, e.g. service providers, subsidiaries or dealers, who will also solely use the personal data internally, and this use will be attributable to us. We will not use your data for automated decision-making or for profiling. 3.2 Processing data when ordering from the spare parts shop Prior registration is required when ordering replacement parts from us, and we will complete this for you when you submit your request. To do this, we will generate a personal username and password for you and send them to you. This information will be linked to the company data (including your contact details) we have stored, and will be used to process your replacement parts order. 3.3 Data processing when handling job applications We collect and process the personal data of applicants for the purpose of processing their applications. The processing may be carried out electronically, particularly if an applicant sends the relevant application documents to us using the contact form. If elumatec AG enters into an employment contract with an applicant, the personal data which has been sent to us will be processed for the purpose of implementing the employment relationship, in accordance with the legal regulations. If we do not enter into an employment contract with an applicant, the application documents will be erased six months after notification of the rejection, provided that there are no other legitimate interests for elumatec AG to continue to store the data. An example of a legitimate interest in this situation would be the obligation to provide evidence in accordance with the German General Act on Equal Treatment (AGG). Please note that, when sending us your application via the contact form, it is the applicant’s responsibility to encrypt the data contained in the application. For this reason, an alternative option is to send us your application by post. Evidence you send to us as part of a claim for reimbursement of travel costs will be stored in accordance with the applicable tax legislation and erased once the statutory retention periods have elapsed. 3.4 Legal basis for the processing of your data The legal basis for processing your data is provided by your consent (pursuant to Article 6(1) point a GDPR) or by the fulfilment of a contract or the execution of pre-contractual measures (pursuant to Article 6(1) point b GDPR). Where necessary, we process your data to protect the legitimate interests of ourselves or third parties, e.g. in system logging to ensure IT security (in accordance with Art. 6(1) point f GDPR). If your data is processed as part of a job application, this is also carried out pursuant to Section 26 of the German Federal Data Protection Act. If you voluntarily disclose particular categories of personal data in the course of your application (e.g. information relating to a severe disability), your data will also be processed pursuant to Article 9(2) point b GDPR. If we request information relating to your health or physical condition in order to meet the requirements for the advertised job, this processing will also be carried out pursuant to Article 9(2) point a GDPR. 3.5 Duration of data storage We will store your data for the duration of the validity of your consent or until its purpose has been fulfilled. This data will thereafter be deleted, provided that there are no further legal obligations to continue to store the data. 4. Sending data to third parties Your personal data will be transferred over the internet in encrypted form using SSL and then sent to us via e-mail by our web hosting service provider, potentially in unencrypted form. We therefore recommend that you do not send us any sensitive data electronically, and use the post instead. If it is necessary to send your data to third parties in order to process your request, the data will only be sent to our affiliated companies or to service providers we have commissioned (such as a web host), who will also solely use your personal data internally, and this use will be attributable to us. Your personal data will only be sent to other third parties with your express permission, unless we are legally required to do so or in order to protect the rights, property and security of elumatec AG. If external service providers are given access to personal data, we require them to implement legal, technical and organisational measures to ensure that data protection regulations are adhered to. 5. Cookies Among other things, our website uses what are known as “cookies”, which help make our overall online services more user-friendly, effective and secure – for example to speed up navigation on our platform. Cookies also allow us to measure how often pages are visited and how users generally navigate around our website. Cookies are small text files that are stored on your computer. Please note that some of these cookies are sent from our server to your computer. These are sometimes referred to as “session cookies”, and they differ from other cookies in that they are automatically deleted from your hard drive when you close your web browser. Other cookies remain on your computer and allow us to recognise your computer when you next visit our website. These are known as “persistent cookies”. You can of course disable cookies at any time, provided that your web browser allows it. You also have the possibility to revoke your consent to processing based on cookies (with the exception of functionally required cookies). 5.1 Our website uses Google Analytics, a web analysis service of Google Inc. ("Google"). This service is only activated by our site and therefore the corresponding cookies are only set when you explicitly agree to this. If you do not do this, this service will not be used. Please note that this website in case of your consent uses Google Analytics with the IP anonymisation extension, and IP addresses are therefore only processed in a shortened form to prevent persons from being identified. Google Analytics uses also cookies, which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Google will not associate your IP address with any other data held by Google. By your consent, you agree to the processing of data about you by Google in the manner and for the purposes set out above. You can withdraw your consent for data to be collected and stored at any time with effect for the future by refusing consent (see above). Alternatively, you can use the Google Analytics opt-out browser add-on (https://tools.google.com/dlpage/gaoptout?hl=en), provided it is available for your browser. Visit www.google.de/policies/privacy/partners to find out how Google uses data. 6. Links to other websites Our website contains links to other websites. We have no influence on whether or not the operators of other websites adhere to data protection regulations. We are responsible for ensuring the content we provide adheres to the general regulations. A distinction should be made between the content we provide and links to content created by other providers. We accept no liability for, and claim no ownership of, external content accessed via links on our website. The party offering websites to which reference is made shall be solely liable for illegal, faulty or incomplete content and in particular for damage arising from the use or non-use of information presented in this fashion. If we become aware of any infringement of rights, we will immediately remove the relevant links. 7. Data processing by Video embedding Our website contains embedded YouTube and Vimeo videos. Through these videos we enable a connection solely to these video providers. A data transfer to YouTube or Vimeo only takes place when you click on a video. YouTube is a service provided by Google Inc.. For the purpose and scope of data collection and use by Google, and for your rights and privacy settings options as a YouTube user, please see YouTube’s privacy information: http://www.youtube.com/t/privacy. Vimeo is a service provided by Vimeo LLC, 555 West 18th Street, New York, New York 10011, USA. For more information on data processing and Vimeo's privacy policy, please visit https://vimeo.com/privacy. 8. Your rights relating to your personal data 8.1 Right of access, rectification, restriction, erasure, release In accordance with the EU General Data Protection Regulation, you have a right at any time to free access to your stored personal data and, where applicable, a right to have this data rectified, restricted or erased. If we are required to comply with legal retention requirements, instead of erasing your data we will restrict it for further processing so that it can no longer be used for the aforementioned purposes. You retain the right to receive an electronic copy of your personal data stored on our servers. 8.2 Individual right of objection You have the right at all times, for reasons arising from your personal situation, to object to the processing of your personal data which is being carried out pursuant to Article 6(1) point f GDPR (Data processing on the basis of a balance of interests); this also applies to profiling on this basis pursuant to Article 4(4) GDPR. If you object to the processing, we will no longer process your personal data unless we can provide evidence of compelling and legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves the purpose of assertion, exercise or defence of legal rights. 8.3 Right of objection to the processing of data for promotional purposes With your consent, we process your personal data for the purposes of direct advertising. You have the right at all times to object to the processing of your personal data for such promotional purposes; this also applies to profiling, to the extent that it is connected to such direct advertising. If you object to this processing for the purposes of direct advertising, we will no longer process your personal data for these purposes. If you have any concerns with regard to your rights, please see the contact details below. 8.4. Right to lodge a complaint If you believe that elumatec AG is processing your data in non-compliance with the applicable data privacy regulations, you have the right to lodge a complaint with a supervisory authority of your choice for data privacy. 9. Data security We ensure that our website and other systems are secure by taking technical and organisational precautions against loss, destruction, access, modification or dissemination of your data by unauthorised persons. The security precautions are being improved continuously in accordance with the relevant technological advancements. Access to your online shop account is protected by your personal password. You should always keep your access information confidential and close the browser window once you have finished your communication with us, in particular if the computer you are using is also used by others. 10. More information and contact details If you have additional questions concerning data protection, please contact us. For questions on collection, processing or use of your personal data, for details on the right of access, and for information on the rectification, blocking/restriction or erasure of data and on withdrawing previous consent, please contact: elumatec AG Data protection officer Pinacher Strasse 61 75417 Mühlacker datenschutzbeauftragter(at)elumatec.com elumatec AG Marketing Pinacher Strasse 61 75417 Mühlacker marketing(at)elumatec.com
