DATA PROTECTION INFORMATION AS PER ARTICLE 13 GDPR

IDENTITY AND CONTACT DETAILS OF PARTY RESPONSIBLE/CONTROLLER

Controller as per GDPR and other data protection laws is:

ERAMON GmbH
Hery-Park 3000
D-86368 Gersthofen
Germany
Phone: +49-821-2498-200
Email: datenschutz@eramon.de

IDENTITY AND CONTACT DETAILS OF DATA PROTECTION OFFICER

The data protection officer for the controller is

3 P Datenschutz GmbH
Stefan Leißl
Sanderstraße 47
D-86161 Augsburg
Germany
Telefon: +49 821 6508 8582
E-Mail: leissl@3-p-datenschutz.de

GENERAL INFORMATION REGARDING DATA PROCESSING

LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA

As required by Article 13 GDPR we hereby inform you of the legal basis on which we process data. Where the legal basis is not specifically named in the data protection notification, the following will apply:

The legal basis for obtaining consent is Article 6 (1) (a) in conjunction with Article 7 GDPR. The legal basis for processing information required to perform our service obligations and carry out contractual measures, as well as information required to answer requests, is: Article 6 (1) (b) GDPR. The legal basis for processing data in order to meet legal obligations is: Article 6 (1) (c) GDPR. If processing of data is necessary to safeguard the legitimate interests of our company or a third party, and they are not overridden by the interests or fundamental rights and freedoms of the data subject, Article 6 (1) (f) GDPR applies. In the event that vital interests of the data subject or another natural person require the processing of personal data, Article 6 (1) (d) GDPR is the legal basis.

DATA ERASURE AND STORAGE PERIODS

We adhere to the principles of data avoidance and data economy, as per Article 5 (1) (c). We save personal data only for as long as it is required in order to achieve the specified purpose, or for the legally mandated retention periods. Once the specific purpose is no longer valid or the relevant retention periods have expired, the corresponding data will be deleted as soon as possible.

EXTERNAL LINKS

This website may contain links to third-party websites or to other websites for which we are responsible. If you follow a link to a website for which we are not responsible, please note that these websites have their own data protection information. We do not assume any responsibility or liability for these third-party websites and their data protection notices. Therefore, before using these websites, please check whether you agree with their data protection declarations.

You can recognize external links by the fact that they are either displayed in a different color from the rest of the text or underlined. Your cursor indicates external links when you move over them. Your personal data will only be transmitted to the destination of the link when you click on such an external link. In this case, the operator of the other website receives specifically your IP address, the time at which you clicked on the link, the page from which you clicked on the link, and further information that you can find in the data protection information of the respective provider.

Furthermore, please note that individual links may result in data being transmitted outside the European Economic Area. This could result in foreign authorities gaining access to your data. You may not have any legal recourse against such access to your data. If you do not wish your personal data to be transmitted to the link destination, or to be exposed to unwanted access by foreign authorities, please do not click on any links.

RIGHTS OF THE DATA SUBJECT

As a data subject as per GDPR you can exercise a number of rights. The rights of the data subject as per GDPR are: the right of access by the data subject (Article 15), the right to rectification (Article 16), the right to erasure (Article 17), the right to restriction of processing (Article 18), the right to object (Article 21), the right to lodge a complaint with a supervisory authority, and the right to data portability (Article 20).

Right of withdrawal:

The processing of certain personal data requires explicit consent. You can withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Right to object:

You as the data subject have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Article 6 (1) (e) or (f) GDPR, including profiling based on those provisions. The controller will no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.

Where personal data are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning yourself for such marketing, which includes profiling to the extent that it is related to such direct marketing. In these cases, personal data will also no longer be processed from the moment the objection has been raised.

Right to lodge a complaint with a supervisory authority:

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement if you consider that the processing of personal data relating to you infringes this Regulation.

Right to data portability:

If your data are processed by automated means, based on consent given, or where processing is necessary for the performance of a contract, you have the right to receive this personal data in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller, where this is technically possible.

Right of access, rectification, and erasure:

You have the right to obtain information which personal data concerning you are being processed, for which purposes, the categories, the recipients, and the period of storage. You also have the right to be informed of your right to request the rectification, erasure, or restriction of processing of personal data concerning you. You can contact us at any time on these and on other issues relating to data protection. You will find our contact details in the imprint section.

Right to restriction of processing:

You have the right to a restriction of processing of your personal data at any time, where one of the following applies:

  • You contest the accuracy of the personal data. For the period required to verify the accuracy, you have the right to demand the restriction of processing your personal data.
  • If the processing is unlawful, you also have the option to request the restriction of the use of the data as an alternative to erasure.
  • Should we no longer require your personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defence of legal claims, you also have the option to request the restriction of the use of the data as an alternative to erasure.
  • Should you object to the processing pursuant to Article 21 (1) GDPR, you have the right to restrict the processing of your personal data, pending the verification whether the legitimate grounds of the controller override yours.

Where processing has been restricted, such personal data, with the exception of storage, will only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person for reasons of important public interest of the Union or of a Member State.

PROVISION OF WEBSITE (WEB HOST)

Our website is hosted by:

IONOS SE

Elgendorfer Straße 57, 56410 Montabaur
Deutschland

When you visit our website, we automatically collect and store information in so-called server log files. This information is automatically transmitted by your browser to our server or to the server of our hosting company.

As there are:

  • IP address of the website visitor’s end device
  • Host name of the accessing computer
  • Visitor’s operating system
  • Browser type and version
  • Name of retrieved file
  • Time of server request
  • Data volume
  • Information if the retrieval was successful

We do not combine these data with other data sources.

Instead of operating this website on a separate/our own server, we can also operate it on the server of an external provider (host company), as named above in this case. The personal data collected by this website is then stored on the servers of the hosting company. In addition to the above-mentioned data, the web host also stores, for example, contact requests, contact details, names, website access data, meta and communication data, contract data and other data that is generated by a website.

The legal basis for processing data by involving a host company is our interest in providing our website safely, fast, and efficiently (Article 6 (1) (f) GDPR). Another legal basis might be in order to meet our contractual obligations with future and existing clients (Article 6 (1) (b) GDPR). Where we have commissioned a host company, there will be a data processing agreement with this service provider.

Use of Local Storage Items, Session Storage Items, and Cookies

Our website uses local storage items, session storage items and/or cookies. Local storage is a mechanism that enables data to be stored in the browser on your device. This data usually includes user preferences, such as the “day” or “night” mode of a website, and is retained until you manually delete the data. Session storage is very similar to local storage, whereas the storage period only lasts during the current session, i.e. until the current tab is closed. After that, the session storage items are deleted from your device. Cookies are information that a web server (server that provides web content) stores on your device to identify that device. They are either deleted temporarily for the duration of a session (session cookies) and at the end of your visit to a website, or they are stored permanently (permanent cookies) on your end device until you delete them yourself or until they are automatically deleted by your web browser.

These objects can also be stored by third-party companies on your end device when you access our site (third-party requests). This enables us, as the operator, and you, as a visitor to this website, to make use of certain services from third parties that are installed on this website. Examples of this include the processing of payment services or the display of videos.

These mechanisms have a wide range of possible uses. They can improve the functionality of a website, control shopping cart functions, increase the security and convenience of using the website, and carry out analyses of visitor flows and behavior. Depending on the individual functions, these are to be classified under data protection law. If they are necessary for the operation of the website and intended to provide certain functions (shopping cart function) or serve to optimize the website (e.g. cookies to measure visitor behavior), then they are used on the basis of Art. 6 (1) (f) GDPR. As the website operator, we have a legitimate interest in the storage of local storage items, session storage items and cookies to ensure the optimized and technically error-free provision of our services. In all other cases, local storage items, session storage items and cookies are stored only with your express consent (Art. 6 (1) (a) GDPR).

As far as local storage items, session storage items or cookies are used by third-party companies or for analytical purposes, we will inform you separately about this as part of this data protection notice. We will obtain your free and explicit prior consent, which you can revoke at any time.

USE OF EXTERNAL SERVICES

We use external services on our website. External services are services provided by third parties that are used on our website. This can be done for a variety of reasons, such as embedding videos or for website security. When using these services, personal data is also passed on to the respective provider. If we do not have a legitimate interest in using these services, we will obtain your consent as a visitor to our website before using them (Article 6 (1) (a) GDPR), which you can revoke at any time.

ANALYTICS

The processing of the personal data of our website visitors enables us to analyze the surfing behavior of our website visitors. By evaluating the data obtained, we are able to compile information about the use of the individual components of our website. This helps us to constantly improve our website and its user-friendliness. The analysis tools used could be used, for example, to create user profiles for the display of targeted or interest-related advertising messages, to recognize our website visitors the next time they visit our website, to measure their click/scroll behavior and downloads, to create heat maps, to recognize page views, to measure the duration of the visit or the bounce rates. It might also recognize the origin of the website visitor (city, country, from which site the visitor comes). The analysis tools help us to improve our market research and marketing.

The processing of the data is founded on the legal basis of consent (Article 6 (1) (a) GDPR). As a visitor to our website you have consented freely, explicitly, and in advance to the processing of your personal data. In the absence of any other justifying legal basis as per Article 6 (1) GDPR, we will not process your personal data in the above manner without separate consent. The same applies if and when you revoke your consent. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Google Analytics

We use the services of Google Analytics on our website. Provider of this service is: Google Ireland Ltd., Gordon House, Barrow Street Dublin 4, Ireland.

Using this service may result in data being transmitted to a third country (USA).

Further information can be found in the provider’s data protection information at the following URL: https://policies.google.com/privacy.

The service uses the following cookies on our website:

NameStorage periodTypePurpose
_ga400 days1st party cookieContains a randomly generated user ID. This ID enables Google Analytics to recognize returning users on this website and to merge the data from previous visits.
_ga_S45XNRSDL3400 days1st party cookieCollects data on how often a user has visited a website, as well as data for the first and last visit.
_gat1 minute1st party cookieThis is used to throttle the request rate, which helps to limit the collection of data on highly frequented websites.
_gid24 hours1st party cookieThis cookie assigns an ID to a user so that the web tracker can summarize the user's actions under this ID.

WP Statistics

We use the services of WP Statistics on our website. Provider of this service is: VeronaLabs OÜ, Tatari 64, 10134 Tallinn,Estland.

Because this service is hosted locally on the web server, no data are being transmitted to third parties

The service stores the following data in the browser’s local or session storage:

NameStorage periodTypePurpose
wpEmojiSettingsSupportsSession1st party cookie session storageIs saved by WP Statistics on the local device.

CONSENT MANAGEMENT

To comply with data protection requirements, our website uses a consent management tool. This tool obtains the required consent for the use of cookies or the use of external services. The consent is then saved.

The controller (operator of the website) is subject to a legal obligation which requires the processing. The legal basis for the processing is therefore Article 6 (1) (c) GDPR.

Borlabs Cookie

COOKIE CONSENT WITH BORLABS COOKIE

We use the technology of Borlabs Cookie on our website to obtain your consent to save certain cookies in your browser, and document them in compliance with data protection rules. Provider of this service is: Borlabs – Benjamin A. Bornschein, Georg-Wilhelm-Str. 17, 21107 Hamburg (hereafter referred to as Borlabs).

When accessing our website, a Borlabs cookie will be saved in your browser in which your preferences (consents and revocations) then saved. These data are not passed on to the Borlabs provider.

The recorded data are saved until you request their erasure, or erase the Borlabs cookie yourself, or the purpose for which the data were saved has been achieved. Compelling legitimate retention periods are unaffected by this. See: https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/ for Borlabs Cookie data processing information.

We use the Borlabs Cookie consent technology to ensure that we obtain the required consent for the use of cookies in compliance with the prevailing law. Legal basis for this is Article 6 (1) S. 1 (c) GDPR.

The service uses the following cookies on our website:

NameStorage periodTypePurpose
borlabs-cookie365 days1st party cookieThis cookie stores the settings of the visitors as selected in the cookie box of the Borlabs Cookie.

Display Optimization

We use tools that serve to optimize the presentation of our website. These tools help to display the website in other languages or to make it more accessible.

Your data will only be processed if you consent to this data processing (via our consent banner on the website). The processing of the data is founded on the legal basis of consent (Article 6 (1) (a) GDPR). We will not process your personal data in the above manner without your consent. The same applies if and when you revoke your consent (for example via the consent banner or other opportunities provided on this website). The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

WPML

We use the services of WPML on our website. Provider of this service is: OnTheGoSystems Ltd., 22/F 3 Lockhart Road, Wanchai, Hong Kong, China.

Because this service is hosted locally on the web server, no data are being transmitted to third parties.

We base this processing on a legitimate interest (Article 6 (1) (f) GDPR).

This application is required to ensure the unlimited functionality of the website. This is a language tool that is considered essential.

The service uses the following cookies on our website:

NameStorage periodTypePurpose
wp-wpml_current_language24 hours1st party cookieThis cookie is used to keep track of the user's language preference.

CONTACT FORM

You can contact us using the form provided on our website. When using this contact form, we will ask you for your contact details.

The legal basis for the processing is the fulfillment of a contract or the performance of pre-contractual measures as per Article 6 (1) (b) GDPR. There may also be a legitimate interest to maintain business relationships, or to answer your request for other reasons.

In this case, processing of the data is founded on the legal basis of consent Article 6 (1) (f) GDPR or.

We save personal data only until your request was answered to your satisfaction, and provided no other retention periods (e.g. relating to tax or commercial law) apply.

The processing of the data is founded on the legal basis of consent either of Article 6 (1) (f) GDPR or Article 6 (1) (b) GDPR.

We save personal data only until your request was answered to your satisfaction, and provided no other retention periods (e.g. relating to tax or commercial law) apply.

 

CONTACT VIA TELEPHONE OR EMAIL

As required by law, we provide you with an email address and a phone number on our website. Data submitted by these means are automatically stored to enable the processing of the requests or to contact the person making the request. Data obtained in this way will not be passed to third parties without your consent.

Where contact was made by phone or email for pre-contractual or contractual purposes, the processing of personal data is founded on the legal basis of Article 6 (1) (b) GDPR. The processing of personal data obtained in the context of any other contact is based on our legitimate interest (Article 6 (1) (f) GDPR).

HANDLING OF APPLICANT DATA

You have the opportunity to send us your application for example by post, online, or by email. Personal data obtained in the course this are stored and processed to help us decide if an offer of employment should be made.

The processing of the data is founded on the legal basis of consent of Article 6 (1) (b) GDPR and Article 6 (1) (a) GDPR, as far as consent was given. As far as German law applies, processing is also based on § 26 BDSG (para 26 of the German Data Protection Law – Initiation of employment). You can revoke your consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before it.

If your application leads to employment, we will store the data collected to process the employment procedures based on Article 6 (1) (b) GDPR. If no employment results from your application, the data will be stored on the legal basis of Article 6 (1) (f) GDPR for the duration of the statutory claims, in particular due to discrimination in the application process. This is necessary for the defense against potential lawsuits or allegations. If consent has been given, the data will be stored for longer on the basis of Art. 6 (1) point a GDPR. You can revoke your consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before it.

APPLICANT POOL

If no employment results from an application, the applicant can be entered in our applicant pool. All details from the application are stored, so the suitable person can be contacted as and when vacancies arise.

Data is only stored to the applicant pool after consent on the legal basis of Article (1) (a) GDPR has been obtained. This consent can be revoked at any time, which will result in the erasure of the relevant data, assuming no other legal reasons for retention exist. The data will be erased latest two years after consent was given. The withdrawal of consent does not affect the lawfulness of processing based on consent before it.