Personal data is information that allows the identification of a natural person. This includes in particular name, date of birth, address, telephone number, e-mail address but also your IP address.
Data is anonymous if no personal reference to the user can be made.
Your rights as data subject
First of all, we wish to provide you with information regarding your rights as a data subject. These rights are defined by Art. 15-22 of the EU General Data Protection Regulation (GDPR) as follows:
- The right to information (Art. 15 GDPR)
- The right to erasure (Art. 17 GDPR)
- The right to rectification (Art. 16 GDPR)
- The right to data portability (Art. 20 GDPR)
- The right to restriction of data processing (Art. 18 GDPR)
- The right to object to data processing (Art. 21 GDPR)
To assert these rights, please contact: firstname.lastname@example.org. The same applies if you have questions about data processing in our company or wish to revoke consent you have given. You also have the right to file a complaint with a data protection supervisory authority.
Provided we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of your personal data without giving reasons. This also applies to profiling, insofar as it is related to direct marketing.
If you object to the processing for direct marketing purposes, your personal data will no longer be used to that end. The objection is free of charge and can be submitted formless, preferably to: email@example.com.
In the event that we process your data for the purpose of safeguarding legitimate interests, you have the right to object to this processing at any time, on grounds relating to your particular situation. This also applies to profiling based on these provisions.
We will no longer process the personal data unless we can provide compelling, legitimate evidence for its necessity outweighing your interests, rights and freedoms or unless the processing is indispensable for the assertion, the exercise, or the defense of legal claims.
From time to time it is necessary to adapt the content of this data protection notice. We therefore reserve the right to change it at any time. We will send the amended version of the privacy notice to registered users by e-mail before it comes into effect and publish it in the same place as this privacy notice.
Purpose and legal basis of data processing
We will comply with the provisions of the GDPR and all other applicable data protection regulations when processing your personal data. The legal basis for data processing results in particular from Art. 6 GDPR.
We use your data to initiate business contacts, to fulfill contractual and legal obligations, to carry out the contractual relationship, to offer products and services, and to strengthen customer relationships, which may also include analyses for marketing purposes and direct advertising.
Your consent to data processing may also constitute a permission requirement under data protection law. Before you consent, we will inform you about the purpose of the data processing and your right to revoke your consent.
Should your consent also apply to the processing of special categories of personal data, we will explicitly notify you thereof during the consent process. Special categories of personal data as per Art. 9 GDPR will only be processed if required by legal provisions and if there is no reason to assume that your legitimate interest to exclude the processing prevails.
Disclosure to third parties
We will only disclose your data to third parties within the scope of statutory provisions or with your consent. Otherwise, we will not disclose your data to third parties unless legally required by mandatory provisions (disclosure to external bodies such as supervisory authorities or law enforcement agencies).
Recipients of personal data / categories of recipients
Within our company, we ensure that your will be only disclosed to those persons who require it in order to fulfil contractual and legal obligations.
In some cases, service providers may support our specialist departments as they perform their tasks. The required data protection agreements have been concluded with all service providers.
Third country transfer / third country transfer intention
Data will only be transferred to third countries (non-EU states and countries outside the European Economic Area) insofar as it is necessary for the fulfillment of the contractual obligation, prescribed by law or if you have given your consent.
We do not transfer any personal data to service providers outside the European Economic Area.
Data retention periods
We store your data as long as the respective processing purpose requires it. Please note that numerous retention periods require the continued storage of data. This applies in particular to retention obligations prescribed by commercial or tax law such as the German Commercial Code (HGB), the German Fiscal Code (AO) etc. In the absence of any further storage obligations, your data will be routinely deleted once its purpose has been fulfilled.
We may additionally retain data with your consent or in the event of legal disputes, in which case we will preserve it as evidence in accordance with statutory limitation periods that may amount up to thirty years, the regular limitation period being three years.
Secure transmission of your data
We use appropriate technical and organizational security measures to protect your data in the best possible way against accidental or intentional manipulation, loss, destruction, or unauthorized access. The security levels are continuously reviewed in cooperation with security experts and adapted to new security standards.
The transmission of data to and from our website is always encrypted. On our website, we provide the transmission protocol HTTPS using the relevant actual encryption protocols. Besides, you may always use alternative communication channels such as postal mail.
Mandatory provision of data
Various personal data are necessary for the creation, implementation and termination of contractual relationship and the fulfillment of related contractual and legal obligations. The same applies to the use of our website and its various features.
We have summarized the details above. However, in certain cases, data must be collected or made available on the basis of legal provisions. Please note that we cannot process your request or carry out the underlying contractual relationship if this data is not provided.
Categories, sources and origin of data
The respective context determines which data we process: it depends on whether you submit an inquiry using our contact form, for example, or send us a job application.
Please note that we may provide information on special data processing situations separately at an appropriate place, e.g. when you upload application documents or send us a contact request.
When you visit our website, we collect and process the data below:
- IP address
- Location of the user
- End device
- Date and time of the request
- Duration of the session
- Time zone difference to Greenwich Mean Time (GMT)
- Content of the request (specific page)
- Access status/HTTP status code
- Amount of data transferred in each case
- Website from which the request comes
- Operating system and its interface
- Language and version of the browser software.
- For technical security reasons (particularly to fend off attack attempts on our web servers), the data is stored according to Art. 6(1)(f) GDPR. After 7 days at the latest, the data is anonymized by truncating the IP address so no reference to the user can be made.
- Playing media
In the context of a contact request, we collect and process the following data:
- Name, first name
- Contact details
- Information on wishes and interests
For online job applications, we collect and process the following data:
- Name, first name
- Contact details
- If applicable, uploaded files (CV, cover letter, references etc.)
- In addition, we use data that we have permissibly obtained from publicly accessible directories (e.g. professional networks).
Cookies (Art. 6(1)(f) GDPR, Art. 6(1)(a) GDPR)
Our website uses so-called cookies to make our offer more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and by your browser (locally on your hard drive). Based on our legitimate interest (Art. 6(1)(f) GDPR), we use technically necessary cookies, which are required to operate our website and ensure its functionality. Depending on their purpose, these cookies are stored permanently, even after ending the session (so-called persistent cookies, e.g. opt-out), or are deleted after the browser is closed (so-called session cookies, which are only valid for one browser session).
Besides, we also set other cookies with your consent. These cookies allow us to analyze how users browse our websites. We can thus adapt our website content to the needs of our visitors, measure the effectiveness of a particular advertisement and position it, for example, according to the thematic interests of our users. The legal basis for this is your consent (Art. 6(1)(a) GDPR).
Cookie consent with OIL.js
Contact form / contact by e-mail (Art. 6(1)(a,b) GDPR)
The contact form on our website can be used for electronic contact. If you use this contact form to notify us, we process your data entries to make contact with you and respond to your questions and wishes.
We conform to the principle of data economy and data reduction by requiring only the data strictly necessary to contact you. These data are your e-mail address, surname, first name and the message field itself. We will also process your IP address out of technical necessity and for legal protection. All other fields are for optional information (for example to allow us to answer your queries more specifically).
If you contact us by e-mail, the personal data stated in your message will only be used to respond to your inquiry.
Advertising purposes for regular customers (Art. 6(1)(f) GDPR)
ECOS TECHNOLOGY GMBH wishes to maintain a good customer relationship with you, we are therefore interested in sending you information and offers related to our products and services, which requires the processing of your data in order to send you the relevant information and offers by e-mail.
Applicant portal (Art. 6(1)(a,b) GDPR)
We appreciate your interest in working for ECOS TECHNOLOGY GMBH. We are aware of the importance of your personal data and process the data you provide in our application form only for the purpose of effective and correct processing of the recruitment procedure and for contacting you as part of the recruitment process. Your data will not be passed on to third parties without your consent.
The application form asks you to provide personal data. We observe the principle of data economy and data avoidance by only requiring you to provide us with the data we need to fully review application documents such as your resume, cover letter etc., or data we are legally obligated to collect. Mandatory data is marked with an * (asterisk). For technical necessity and legal protection, your IP address is also processed.
Please note that we cannot review your application documents without this data, which is why our job application system will not allow the upload your application documents in this case. However, you may of course provide voluntary information in the application form.
We will store your data for the above-mentioned purposes until the recruitment process has been completed and any deadlines in this regard have expired - no later than six months after receipt of a decision.
Links to other providers
Our website contains clearly visible links to other companies' websites. As far as links to websites of other providers are available, we have no influence on their contents. Therefore, no guarantee or liability can be assumed for these contents. The respective provider or operator of these sites is always responsible for the contents of such sites.
The linked pages were checked for possible violations of law and recognizable infringements at the time of linking. Illegal contents were not recognizable at the time of linking. However, a permanent control of the contents of the linked pages is not reasonable without tangible evidence of a violation of the law. As soon as we become aware of infringements of the law, such links will be removed immediately.