Welcome to elumatec AG, Thank you for your interest in our website and our company. We are fully aware of the importance of protecting your personal data and privacy. To ensure that you are fully aware of how your personal data is collected, processed and used on our websites, please read the following guide Important information: This privacy policy may be amended from time to time. For example, it is amended when technological progress, legal requirements or other influences mean changes need to be made. We therefore ask you to visit this page from time to time to find out about any changes to this privacy policy. 1. Controller for processing personal data Your data is processed on behalf of elumatec AG Pinacher Strasse 61 75417 Mühlacker Germany Controller and CEO: Nebojsa Wosel Our data protection officer can be contacted via the postal address above or by e-mail at datenschutzbeauftragter@elumatec.com. 2. Data collection for use in internal systems and for statistical purposes When you access our website, the security technology built into your internet browser means that it automatically sends data to our web server. This includes the time and date of your visit, the URL of the referring website, the file retrieved, the type of browser, the operating system and the IP address you used. This data is stored separately from other data that you submit while using our online services. This data is only associated with an individual person if there is a concrete suspicion of unlawful use. We keep a log of every time our website is accessed and a file stored on the website is retrieved. The log data collected is used for statistical analysis for the purpose of secure operation, security and making the website more convenient to use, and the data is then erased. If there are concrete indications of suspected unlawful use, we reserve the right to subsequently review the log data and, if necessary, to analyse it in response to the specific suspicion. The legal basis for the processing is our legitimate interest in accordance with Art. 6(1) point f GDPR. 3.Collection and processing of personal data Personal data is also collected and processed if you voluntarily send us your personal data via our website. This can be done as follows: 3.1 Processing data when using our forms You can contact us via our website using our contact forms for sales, press, personnel, service, training and trade fairs. The personal data which is sent to us depends on the input mask used when contacting us. The personal data you enter is collected and stored solely for internal use and our own purposes. The respective purposes initially depend on the nature of your query and serve the purposes of • responding to your requests submitted in the contact forms • customer acquisition, in particular for written/telephone contact • marketing activities (on the basis of your consent, in particular sending of customer magazines, newsletters, invitations/mailings containing general information or of promotional nature by post and/or in electronic format, or calls to arrange meetings/appointments) • creating sales statistics (solely for internal use) • forwarding your data to your nearest sales/service location for further processing • order processing when using our spare parts shop (see point 3.2) We may arrange for your data to be disclosed to one or more processors, e.g. to service providers (web hosting providers etc.), to companies within the group or to dealers, who will also solely use the personal data internally for the purposes stated above. 3.2 Processing data when ordering from the spare parts shop Prior registration is required when ordering replacement parts from us, and we will complete this for you when you submit your request. To do this, we will generate a personal username and password for you and send them to you. This information will be linked to the company data (including your contact details) we have stored, and will be used to process your replacement parts order. 3.3 Data processing when handling job applications We collect and process the personal data of applicants for the purpose of processing their applications. The processing may be carried out electronically, particularly if an applicant sends the relevant application documents to us using the contact form. If elumatec AG enters into an employment contract with an applicant, the personal data which has been sent to us will be processed for the purpose of implementing the employment relationship, in accordance with the legal regulations. If we do not enter into an employment contract with an applicant, the application documents will be erased six months after notification of the rejection, provided that there are no other legitimate interests for elumatec AG to continue to store the data. An example of a legitimate interest in this situation would be the obligation to provide evidence in accordance with the German General Act on Equal Treatment (AGG). Please note that, when sending us your application via e-mail, it is the applicant’s responsibility to encrypt the data contained in the attached documents sent to us. For this reason, an alternative option is to send us your application by post. Evidence you send to us as part of a claim for reimbursement of travel costs will be stored in accordance with the applicable tax legislation and erased once the statutory retention periods have elapsed. 3.4 Legal bases for the processing of your data We process your personal data in accordance with the provisions of the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and all other relevant laws (e.g. German Digital Services Act (DDG), German Telecommunications Digital Services Data Protection Act (TDDDG), etc.). The lawfulness (legal basis) for the processing of your data is derived from the following: • your consent (in accordance with Art. 6(1) point a GDPR), e.g. if you consent to the use of your data for marketing activities; • fulfilment of a contract or the implementation of pre-contractual measures (in accordance with Art. 6(1) point b GDPR), e.g. in order to process a query about our products; • fulfilment of a legal obligation to which we are subject (in accordance with Art. 6(1) point c GDPR), e.g. retaining relevant business documents or obtaining your consent for services requiring consent; • safeguarding the legitimate interests of elumatec AG by processing data in accordance with Art. 6(1) point f GDPR, e.g. to log website activity; • processing your data as part of a job application; this is carried out in accordance with Section 26 of the BDSG in conjunction with Art. 6(1) b GDPR; • if you voluntarily disclose particular categories of personal data in the course of your application (e.g. information relating to a severe disability), your data will also be processed in accordance with Article 9(2) point b GDPR. • if we request information relating to your health or physical condition in order to meet the requirements for the advertised job, this processing will also be carried out in accordance with Article 9(2) point a GDPR. 3.5 Duration of data storage We will store your data for the duration of the validity of your consent or until its purposes have been fulfilled. This data will thereafter be erased, provided that there are no further legal obligations to continue to store the data. This regularly results from legal obligations to provide evidence and retain records, which are regulated in the German Commercial Code and the German Fiscal Code, among others. 3.6 Automated decision-making/profiling We will not use your data for automated decision-making or for profiling. 4. Sending data to third parties Your personal data will be transferred over the internet in encrypted form using SSL and then sent to us via e-mail by our web hosting service provider, potentially in unencrypted form. We therefore recommend that you do not send us any sensitive data electronically, and use the post instead. If it is necessary to disclose your data to third parties in order to process your request, the data will only be sent to companies within the group, to dealers or to service providers we have commissioned (such as a web host), who will also solely use your personal data internally for the purposes stated above. Your data will not be transferred to a third country. Your personal data will only be disclosed to other third parties with your express permission, unless we are legally required to do so or in order to protect the rights, property and security of elumatec AG. If external service providers are given access to personal data, we require them to implement legal, technical and organisational measures to ensure that data protection regulations are adhered to. 5. Use of cookies and other services Among other things, our website uses what are known as “cookies”, which help make our overall online services more user-friendly, effective and secure – for example to speed up navigation on our platform. Cookies also allow us to measure how often pages are visited and how users generally navigate around our website. Cookies are small text files that are stored on your computer. Please note that some of these cookies are sent from our server to your computer. These are sometimes referred to as “session cookies”, and they differ from other cookies in that they are automatically deleted from your hard drive when you close your web browser. Other cookies remain on your computer and allow us to recognise your computer when you next visit our website. These are known as “persistent cookies”. In principle you can of course disable cookies at any time, provided that your web browser allows it. With the exception of purely functional cookies (the “Technical cookies and similar” category), which we need in order to operate the website and display pages correctly, you can choose whether you consent to the processing of the following categories of cookies: • Functional or personalisation cookies, e.g. setting for the language displayed • Profiling and analytics cookies, e.g. statistical evaluation by Matomo • Social network cookies, e.g. for the Vimeo video player Processing in connection with these cookies only takes place if you have given your consent. Videos will only be displayed if you have given your consent. A notice may appear on certain pages indicating that consent is required to view the intended video. You can give your consent when you visit our website for the first time, or you can make changes to consent you have given at any time via the “Cookie settings” link, which you can find in the footer of each of our web pages. Furthermore, you have here the option to revoke your consent to processing based on cookies (with the exception of functionally required cookies). 5.1 Use of Matomo With your consent, our website uses the Matomo web analytics services. Matomo also uses cookies, which are stored on your computer and allow us to analyse your use of the website, provided you have given your consent. You can withdraw this consent at any time (see above). For this purpose, the usage information generated by the cookies (including your shortened IP address) is transmitted to our server and stored for usage analytics purposes, which serves to optimise our website. Your IP address is immediately anonymised during this process so that you as a user remain anonymous to us. The information generated by the cookies about your use of this website is not disclosed to third parties. You can prevent the use of cookies by selecting the appropriate settings on our website. The legal basis for processing by Matomo is Art. 6(1) point f GDPR. 5.2 Data processing by Vimeo We use the provider Vimeo to embed videos. Vimeo is operated by Vimeo, LLC, headquartered at 555 West 18th Street, New York, New York 10011. We therefore use plugins from Vimeo on some of our web pages. If you access the web pages of our website that have one of these plugins and consent to the associated transfer of your data to Vimeo, a connection to the Vimeo servers is established and the plugin is displayed. This tells the Vimeo server which of our websites you have visited. If you are logged in to Vimeo as a member, Vimeo associates this data with your personal user account. This data is also associated with your user account if you use the plugin, e.g. if you click on the Play button on a video. You can prevent this data from being associated by logging out of your Vimeo user account before using our website and clearing the corresponding cookies from Vimeo. More information about how Vimeo processes and protects data can be found at https://vimeo.com/privacy. The legal basis for processing by Vimeo is Art. 6(1) point f GDPR. 6. Links to other websites Our website contains links to other websites. We have no influence on whether or not the operators of other websites adhere to data protection regulations. We are responsible for ensuring the content we provide adheres to the general regulations. A distinction should be made between the content we provide and links to content created by other providers. We accept no liability for, and claim no ownership of, external content accessed via links on our website. The party offering websites to which reference is made shall be solely liable for illegal, faulty or incomplete content and in particular for damage arising from the use or non-use of information presented in this fashion. If we become aware of any infringement of rights, we will immediately remove the relevant links. 7. Your rights relating to your personal data If you have any concerns with regard to all the rights you have, please see the contact details below. In detail, your rights are: 7.1 Right of access, rectification, restriction, erasure, release In accordance with the EU General Data Protection Regulation, you have a right at any time to free access to your stored personal data and, where applicable, a right to rectification, restriction of processing and erasure of this data. If we are required to comply with legal retention requirements, instead of erasing your data we will restrict it for further processing so that it can no longer be used for the aforementioned purposes. You retain the right to receive an electronic copy of your personal data stored on our servers. If the processing is based on Art. 6(1) point a, you have the right to withdraw your consent at any time. 7.2. Individual right of objection You have the right at all times, for reasons arising from your personal situation, to object to the processing of your personal data which is being carried out in accordance with Article 6(1) point f GDPR (Data processing on the basis of a balance of interests); this also applies to profiling on this basis in accordance with Article 4(4) GDPR. If you object to the processing, we will no longer process your personal data unless we can provide evidence of compelling and legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves the purpose of assertion, exercise or defence of legal rights. 7.3. Right of objection to the processing of data for promotional purposes With your consent, we process your personal data for the purposes of direct advertising. You have the right at all times to object to the processing of your personal data for such promotional purposes; this also applies to profiling, to the extent that it is connected to such direct advertising. If you object to this processing for the purposes of direct advertising, we will no longer process your personal data for these purposes. 7.4. Right to lodge a complaint If you believe that elumatec AG is processing your data in non-compliance with the applicable data privacy regulations, you have the right to lodge a complaint with a supervisory authority of your choice for data privacy. 8. Data Security We ensure that our website and other systems are secure by taking technical and organisational precautions against loss, destruction, access, modification or dissemination of your data by unauthorised persons. The security precautions are being improved continuously in accordance with the relevant technological advancements. Access to your online shop account is protected by your personal password. You should always keep your access information confidential and close the browser window once you have finished your communication with us, in particular if the computer you are using is also used by others. 9. Obligation to provide your data When you contact us, you must provide the personal data that is required for us to contact you. Without this data, we will not be able to respond to your query. There is no other obligation to provide your data. 10. More information and contact details If you have additional questions concerning data protection, please contact us. For questions on collection, processing or use of your personal data, for details on the right of access, and for information on the rectification, blocking/restriction or erasure of data and on withdrawing previous consent, please contact: elumatec AG Data Protection Officer Pinacher Strasse 61 75417 Mühlacker datenschutzbeauftragter(at)elumatec.com elumatec AG Marketing Pinacher Strasse 61 75417 Mühlacker marketing(at)elumatec.com
