In the following, we provide you with information regarding the collection of personal data when using our website and when making contact via a contact form, by email or by telephone. Personal data is any data that can be personally related to you, e. g., name, address, email addresses, user behaviour.
I. Name and contact details of the controller and the data protection officer
1. The Controller in accordance with Art. 4(7) of the EU General Data Protection Regulation (GDPR) is Intelligente Sensorsysteme Dresden GmbH, Zur Wetterwarte 50, 01109 Dresden, Germany, +49 (0)351/ 88 596-0, email@example.com (see our Legal Information).
2. You can reach our data protection officer at firstname.lastname@example.org or our company address with the addition ‘The Data Protection Officer’
II. General information on the collection, transfer and storage of personal data
1. We process your personal data in compliance with the provisions of the GDPR, the German Federal Data Protection Act (BDSG) and all other relevant laws.
2. The processing of data primarily serves to establish and fulfil a contractual relationship with you. When you contact us by email, via a contact form or by telephone, we will store the data you provide (your email address, if applicable your name and your telephone number) in order to answer your questions. The primary legal basis for this is Art. 6(1b) GDPR. In addition, your separate consent in accordance with Art. 6(1a), 7 GDPR may be deemed legal consent as it pertains to privacy. We also process your data in order to be able to fulfil our legal obligations, in particular in the area of commercial and tax law. This is done on the basis of Art. 6(1c) GDPR. Where necessary, we also process your data on the basis of Art. 6(1.f) GDPR in order to safeguard our own legitimate interests or those of third parties.
3. Your personal data will not be transmitted to third parties for purposes other than those listed below. We will only pass on your personal data to third parties if you have given your express consent pursuant to Art. 6(1a) GDPR, if disclosure pursuant to Art. 6(1f) GDPR is necessary to assert, exercise or defend legal claims and if there is no reason to believe that you have an overriding legitimate interest in not disclosing your data, in the event that there is a legal obligation to disclose your data pursuant to Art. 6(1c) GDPR and if this is permitted by law and is necessary for the processing of contractual relationships with you pursuant to Art. 6(1b) GDPR.
4. If we use contracted service providers for individual functions of our offer or would like to use your data for advertising purposes, we will inform you in detail below about the respective processes. We also list the criteria defined for the storage period.
5. We delete your personal data as soon as it is no longer necessary for the following purposes. Following termination of the contractual relationship, your personal data will be stored as long as we are legally obliged to do so. This regularly results from legal proof and retention obligations, which are regulated, among other things, in the German Commercial Code and Tax Code. The retention periods according to these codes are up to ten years. In addition, personal data may be retained for the period during which claims can be asserted against us (statutory limitation period of three or up to thirty years).
III. Collection of personal data on our website
1. Visiting our website
1.1 When using the website for information purposes only, i.e., if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect data that is technically necessary for us to display our website to you and to ensure stability and security. The data is also stored in the log files of our system. This data is not stored together with any other personal data of the user. This data includes the IP address, date and time of the request, time zone difference to Greenwich Mean Time (GMT), content of the request (specific page), access-status/HTTP-status code, amount of data transmitted in each case, website from which the request originates, browser, operating system and its interface and language and version of the browser software.
1.2 The legal basis for the temporary storage of data and log files is Art. 6(1f) GDPR.
1.3 The temporary storage of the IP address by the system is necessary to enable the website to be delivered to your browser. To do this, your IP address must remain stored for the duration of the session. Storage in log files ensures the functionality of the website. In addition, the data helps us to optimise the website and to ensure the security of our IT systems. These purposes also constitute our legitimate interest in data processing pursuant to Art. 6(1f) GDPR. An evaluation of the data for marketing purposes does not take place in this context.
1.4 The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. In cases where data is collected for the provision of the website, this occurs when the respective session has ended. Log files are deleted within seven days of accessing the website.
1.5 The collection of data when visiting the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility to object on your part.
2.1 Cookies are stored on your computer system when you use our website. Cookies are text files that are stored in the Internet browser or by the Internet browser on your computer system. If you visit a website, a cookie can be stored on your operating system. This cookie contains a characteristic string that enables unique identification of the browser when the website is accessed again.
2.2 This website uses the following types of cookies, the scope and functioning of which are explained below:
• Transient cookies (temporary use)
• Persistent cookies (time-limited use)
• Third-party cookies (from third parties according to separate information).
2.4 Persistent cookies are used exclusively in connection with the web analysis services we use and only for as long as the purpose requires; they have a maximum lifetime of two years. You can delete the cookies in the security settings of your browser at any time. In this case, the functions and the ease of use of the offer could be restricted. The legal basis for the processing of personal data using persistent cookies is Art. 6(1f) GDPR. Analytical cookies are used for the purpose of improving the quality of our website and its contents. By means of the analytical cookies, we learn how the website is used and can thus continuously optimise our offer. These purposes also constitute our legitimate interest in the processing of personal data pursuant to Art. 6(1f) GDPR.
3. Other functions and offers of our website
3.1 In addition to the purely informational use of our website, we offer various services that you can use if you are interested. For this purpose, you must usually provide further personal data that we use to provide the respective service and for which the aforementioned principles for data processing apply.
3.2 In some cases, we use external service providers to process your data. These have been carefully selected and commissioned by us, are required to comply with our instructions and are regularly checked.
3.3 Furthermore, we may pass on your personal data to third parties if we offer promotions, sweepstakes, contracts or similar services together with partners. You can obtain more detailed information about this by providing your personal data or in the description of the offer below.
3.4 If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you of the consequences of this circumstance in the description of the offer.
4. Data security
We also use suitable technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.
IV. Collection of personal data when contacting us by email, post and telephone
1. Collection of personal data from customers, prospective customers and suppliers
1.2 You are not obliged to provide the aforementioned personal data. The data provided may be necessary for the conclusion of a contract. Without the provision of the data, it is possible that communication, conclusion of a contract or contract processing may not take place.
1.3 A transmission of the relevant data in the respective individual case takes place on the basis of the statutory provisions or a contractual agreement to public bodies in the case of prevailing legal provisions, to external service providers or other contractors and to other external bodies, insofar as you have given your consent or a transmission is permissible for reasons of overriding interest. There is no intention to transfer your data to a recipient in a third country (not an EU/EEA Member State) or an international organisation.
1.4 The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. For the personal data provided, this is the case when the respective conversation with you has ended. The conversation is concluded when it can be inferred from the circumstances that the relevant facts have been conclusively clarified. Insofar as the data communicated is subject to the retention obligations under tax and commercial law, it will be stored for the duration of the retention obligations of ten years and then deleted, unless you have consented to further storage or the further processing of the data is necessary for the assertion, exercise or defence of legal claims. The legal basis for the processing of personal data for the purpose of fulfilling the statutory archiving and storage obligations is Art. 6 (1c) GDPR.
2. Collection of personal data from applicants
2.1 We collect your personal data as an applicant only if you provide it to us on your own initiative by email, post or telephone. This applies both to applications for job advertisements and to unsolicited applications. We will then collect the information provided in the application. This includes, in particular, name, date of birth, contact details, interests, qualification data as well as education and career progression. The personal data collected from you will only be used for the purpose of conducting the application procedure (legal basis Art. 6[1a, b and f] GDPR, Section 26 BDSG).
2.2 You are not obliged to provide the aforementioned personal data. The data communicated may be necessary for a future conclusion of a contract after completion of the application procedure. Without the provision of the data, it is possible that communication, the implementation of the application procedure or conclusion of a contract cannot take place.
2.3 A transmission of the relevant data in the respective individual case takes place on the basis of the statutory provisions or a contractual agreement. Data is transmitted to HR employees, management employees and the respective department manager. Your personal data will not be transmitted to third parties. There is no intention to transfer your data to a recipient in a third country (not an EU/EEA Member State) or an international organisation.
2.4 The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. In the event that your application is not accepted, we will therefore retain your data after the application procedure for a period of six months after you have been notified that your application has not been accepted. If you have consented to the data being stored for longer, the storage period is two years. After that, we will either delete your data or obtain your consent again. You have the option to revoke your consent to the processing of personal data at any time.
More information on the topic of privacy and the application process can be found in summarised form here.
V. Objecting to or revoking consent to the processing of your data
1. If you have given your consent to the processing of your data, you can revoke it at any time. Such revocation affects the legitimacy of the processing of your personal data after you have informed us thereof.
2. You can object to the processing insofar as we base the processing of your personal data on the weighing of interests. This is the case if the processing is, in particular, not required for the fulfilment of a contract with you, which is demonstrated by us in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event that your objection is justified, we will examine the situation and will either discontinue or adapt the data processing or indicate to you our compelling legitimate grounds on the basis of which we continue the processing.
3. You can of course object to the processing of your personal data for advertising and data analysis purposes at any time. You can inform us about your objection to advertising at the following contact details: Intelligente Sensorsysteme Dresden GmbH, Zur Wetterwarte 50, 01109 Dresden, Germany, email@example.com.
VI. Your rights
1. You have the right to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, deletion, restriction of processing or objection, the existence of a right of appeal, the origin of your data, if this has not been collected from us, as well as the existence of automated decision-making including profiling and, if necessary, meaningful information about their details.
2. In accordance with Art. 16 GDPR, you can immediately request the correction of your incorrect or complete personal data stored by us. You have the right to request the deletion of your personal data stored by us in accordance with Art. 17 GDPR, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims.
3. Pursuant to Art. 18 GDPR, you have the right to request the restriction of the processing of your personal data insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you reject its deletion and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have objected to the processing in accordance with Art. 21 GDPR.
4. Pursuant to Art. 20 GDPR, you have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request the transfer to another controller.
5. Pursuant to Art. 7(3) GDPR, you have the right to revoke your consent to us at any time. As a result, we may no longer continue the data processing based on this consent in the future.
6. You also have the right pursuant to Art. 77 GDPR to complain to a supervisory authority about the processing of your personal data by us, for example to the Saxon Data Protection Officer responsible for us, Bernhard-von-Lindenau-Platz 1, 01067 Dresden, Germany, phone: 03 51/ 49 3-5401, email: firstname.lastname@example.org.