Privacy Policy
1. Introduction
Within the meaning of the General Data Protection Regulation (GDPR) we define personal data as all data relating to the personal and factual circumstances of a natural person.
2. Data protection contact
EFB-Elektronik GmbH
Striegauer StraĂźe 1
33719 Bielefeld
Germany
Tel.: +49 (0) 521 - 40 41 8 - 0
E-mail: info(at)efb-elektronik.de
Our data protection officer is provided by SICODA GmbH www.sicoda.de. You can contact the data protection officer regarding data protection issues at any time:
SICODA GmbH
c/o DSB - EFB Elektronik
Rochusstr. 198
53123 Bonn
Germany
E-mail: Datenschutz(at)efb-elektronik.de
3. Legal basis
Consent: If your consent for processing operations of personal data has been obtained, Art. 6 para. 1 lit. a) GDPR is the legal basis for data processing. Consent given can be revoked with effect for the future at any time.
Contract: If data has been collected for the performance of a contract to which you are a party, the legal basis is Art. 6 para lit. 1 b) GDPR. This also applies to processing operations that are necessary for the performance of pre-contractual measures.
Statutory duty: If the processing of data is necessary for the fulfilment of a statutory duty to which our company is subject, Art. 6 para. 1 lit. c) GDPR serves as the legal basis.
Vital interests: If your or another natural person’s vital interests make the processing of data necessary, Art. 6 para. 1 lit. d) GDPR is the legal basis.
Legitimate interests: If the processing is necessary to protect a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first mentioned interest, Art. 6 para. 1 lit. f) GDPR serves as legal basis for the processing. Our company’s legitimate interest consists in carrying out our business activities.
Employment relationship: According to Art. 88 GDPR in conjunction with section 26 of the Federal Data Protection Act (BDSG), personal data of employees shall be processed for the purposes of the employment relationship if it is necessary for the establishment of an employment, its implementation or termination or for the exercise or fulfilment of the right and obligations of the employee’s representation of interests resulting from a law or collective agreement, a company agreement or a service agreement.
4. Rights of data subjects
You have
- the right to request information about your personal data processed by us to the extent specified in Art. 15 GDPR;
- the right to request the correction of incorrect or incomplete personal data stored by us without delay according to Art. 16 GDPR;
- the right to request the deletion of your personal data stored by us in accordance with Art. 17 GDPR, unless further processing is necessary to exercise the right to freedom of expression and information; to comply with legal obligations; for reasons of public interest or to assert, exercise or defend legal claims;
- the right to demand the restriction of the processing of your personal data according to Art. 18 GDPR if you deny the accuracy of the data; the processing is illegal but you object its erasure; we no longer require the data but you need it for the assertion, exercise or defense of legal claims; or you objected to the processing in accordance with Art. 21 GDPR;
- the right to receive the personal data that you have provided for us in a structured, common and machine-readable format or to request its transfer to another controller according to Art. 20 GDPR;
- the right to object to the processing of personal data concerning you according to Art. 21 GDPR if the processing is based on a legitimate interest;
- the right to complain to a supervisory authority according to Art. 77 GDPR. As a rule, you can contact the supervisory authority located at your place of residence, workplace or our company headquarters for this purpose.
5. Storage duration
If certain data is subject to statutory retention periods, we store them until the corresponding retention periods have expired.
If you have given us your express consent to continue storing certain data, we will retain your data until you revoke your consent. The following e-mail address can be used for revocation: Datenschutz(at)efb-elektronik.de
6. Transferring data to the US
In these cases, we ensure that the requirements imposed by the GDPR pursuant to Art. 11 regarding the transfer to a third country are fulfilled.
7. Contact/callback form
We process that data that you transmit to us via forms exclusively for the purpose of contacting you.
You can revoke your consent to data processing at any time and without giving reasons.
8. Newsletter
When you register for the newsletter, we store your IP address and the date of registration. Storing this data serves solely as a proof if a third party misuses an e-mail address and registers to receive the newsletter without the knowledge of the authorized person.
German Newsletter: https://newsletter.efb-elektronik.de/f/117939-325287/wwu/
English Newsletter: https://newsletter.efb-elektronik.de/f/117939-325314/wwu/.
9. Application
According to Art. 88 GDPR in conjunction with section 26 of the Federal Data Protection Act (BDSG), personal data of employees shall be processed for the purposes of the employment relationship if it is necessary for the decision on the establishment of an employment relationship or, after the establishment of an employment relationship, for its implementation or termination or for the exercise or fulfilment of the rights and obligations of the employee’s representation of interests resulting from a law or collective agreement, a company agreement or a service agreement.
The data is processed for the duration of the employment relationship. Any further processing will only take place if we are obliged to store the personal data of our employees due to other legal regulations if you have given us your consent to do so or if this is legally permissible.
If your application is not successful, we will delete your personal data after 7 months at latest.
If you have given us your consent to also use your personal data to contact you about other positions that may be of interest to you during the application process, we will store your personal data until you revoke your consent. Please send your revocation to Datenschutz(at)efb-elektronik.de. In the event of a revocation, the stored data will be deleted immediately.
10. Shop
10.1. Session cookies
10.2. Login area
The data collected in the context of a user login is only used to provide the respective service. An evaluation only takes place to ensure a comfortable and secure operation of the system.
You can have your account deleted by notifying us via contact form, e-mail or telephone.
10.3. User profile
11. Web server logs
Such information includes:
- IP address of the calling system
- browser information such as operating system used and screen resolution
- web page accessed
- original website
- time of the call
The web server logs are processed exclusively for security purposes. The legal basis for this processing is Art. 6 para. 1 lit f) GDPR, the legitimate interest of the person responsible.
We only use the log data for statistical evaluations for the purpose of the operation, security and optimization of the offer. However, we reserve the right to subsequently check the log data if there is a justified suspicion of unlawful use due to concrete indications.
12. CookieFirst
The following data is processed as part of the management of your cookie settings:
- IP address (will be anonymised)
- information about the used browser
- information about the used device
- information about the used operating system
- date and time of visit
- country and region
- cookie settings
Your cookie settings are stored for a period of one year.
13. Cookies
Cookies are text files that are stored on your terminal device. Cookies can be read, transferred and changed by the website when you call up the website.
We use both so-called “first-party cookies”, i.e. cookies that are controlled by the company that operates the domain on which the cookies are set, and so-called “third-party cookies”. The latter are controlled by third parties and help us to analyse the impact of our website content and the interests of our visitors, to measure the performance of our website or to serve tailored advertising and other content on our website or other websites.
Most of the cookies we use are so-called “session cookies”. They are automatically deleted after the end of your visit or browser session (so-called transient cookies). Other cookies remain stored on your terminal device for a specified period of time or until you delete them (so-called persistent cookies). These cookies enable us to recognise your browser on your next visit. We only use cookies with random, pseudonymous identification numbers. These identification numbers are used to evaluate your usage behaviour on our website. At no point will the user profile be associated with the name of a natural person. If you use special functions of your website (such as the shopping basket or “stay logged in”), cookies are additionally used for these functions.
Tracking pixels are tiny graphic files and are used to retrieve data from your end device, such as your device type, operating system, IP address or the time of your visit.
Local storage objects (LSO) work similarly to cookies. However, information is stored locally in the browser.
If the cookies and other technologies are technically necessary for the operation of the website, the legal basis for the use of these and the associated processing of your personal data is our legitimate interest according to Art. 6 para. 1 lit f) GDPR. Our legitimate interests here lie in particular in being able to provide you with a technically optimized website that is user-friendly and tailored to you needs, as well as ensuring the security of our systems.
The use of cookies and other technologies which are not technically necessary for the operation of the website, and which primarily serve analysis and marketing purposes, as well as the processing of your personal data in connection with this, only takes place in accordance with Art. 6 para. 1 lit a) GDPR if you have given us your express consent.
When you first access our website or one of its subpages, you will be informed about the cookies and other technologies used on the website within the context of a so-called cookie banner and will be given the opportunity to select for yourself which of the cookies and other technologies requiring your consent you would like to give your consent to.
Via the cookie banner you also have the option to find out about the individual functions of the cookies at any time by clicking on the “cookies” button or to view our detailed data protection declaration by clicking on the “data protection declaration” button.
Once you have given your consent, you can revoke it any time and change your settings regarding cookies requiring consent and other technologies at any time by clicking on the small icon at the bottom left of the screen.
14. External content
14.1. Ausschreiben.de
Contact enquiries via de contact form of “Ausschreiben.de” end up with us. You can find information on this data processing under “contact from/callback form”.
“Ausschreiben” is provided by ORCA Software GmbH, Georg-Wiesböck-Ring 9, 63115 Neubeuern. ORCA Software GmbH is responsible for the processing of personal data within the integration of “Ausschreiben.de”. You can find more information on data processing here: https://ausschreiben.de/datenschutz.
14.2. YouTube
If you have given your consent regarding the use of YouTube, a communication connection to the YouTube server will be established, even if a video is only displayed as a still image on our website. This way the service receives various data, including the IP address of your computer, any cookies already stored on your computer and information stored during previous contacts with YouTube. If no data has been saved yet, the service saves cookies on your computer for the first time. When you contact YouTube, the service also receives information about any user account you may have with YouTube. Further information when interacting with the video, such as clicking the start, pause and end button, is also transmitted to the provider. You can stop the processing of data if you visit a page without video and delete all cookies from your computer.
Further information on data processing and notes on data protection by YouTube can be found at https://policies.google.com/privacy?hl=en.
14.3. Google Maps
For more information on Google Maps, please refer to Google’s privacy policy and terms of use:t https://policies.google.com/privacy?hl=en.
14.4. Talention
More information on how we handle applicant data can be found under “Application”.
On the “Talention“ site, you are able to accept cookies from “Talention”. “Talention“ is responsible for this.
More information on this at: https://www.talention.de/datenschutzerklaerung.
15. Web analysis
15.1. Google Analytics
The IP addresses are being anoymised. This means that your IP address is shortened beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases the full IP address will be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.
Furthermore, Google’s own processing, which is not further defined by Google, is provided for the provision and protection of the analytics service. However, we did not share any data with Google for its own processing using the data sharing settings.
The legal basis for us collecting data with the Google Analytics software is your consent pursuant to Art. 6 para. 1 lit. a) GDPR. You can revoke your consent with effect for the future at any time using the procedure described above.
Your data will be deleted automatically after 14 months . Data whose retention period has been reached, will be deleted automatically once a month.
For more information, please visit the following website: https://policies.google.com/privacy?hl=en.
15.2. Statistik Professionell Pro
15.3. Microsoft Clarity
15.4. Pardot | Marketing Cloud Engagement
Account Engagement sets first-party cookies for tracking purposes and sets third-party cookies for redundancy. Using first-party and third-party cookies together is standard in the marketing automation industry. We don’t store personally identifying information, only a unique identifier. First-party cookies are set on Account Engagement domains and tracker subdomains. If no tracker subdomain is configured, we use third-party cookies on HTTPS pages.
16. Google Ads
For a complete overview of data processing, please refer to Google’s privacy policy: https://policies.google.com/privacy?gl=de&hl=en
17. Social Media
If you visit our company page on one of these social media platforms, your personal data may be processed.
17.1. LinkedIn
If you visit our LinkedIn page and respond to our content, your personal data such as your username, the content you publish on LinkedIn and your responses to our company’s content may be processed by us. For example, we could respond to them our mention your account or your content in content that we publish.
Users can object to certain kind of data processing by LinkedIn. Options for that can be found here:
https://www.linkedin.com/help/linkedin/answer/a1338610/widerspruch-gegen-die-datenverarbeitung-einschrankung-der-datenverarbeitung?lang=en.
Regarding the data collected in the context of our job offers, LinkedIn acts as a processor. In this regard, we have concluded an agreement in accordance with Art. 28 GDPR.
LinkedIn provides us with statistics for our website in form of anonymized company page analytics which help us gain insights into the performance of our company page. LinkedIn processes your data shared with LinkedIn when you visit, follow or interact with our site. We have established a separate agreement with LinkedIn for this purpose. It can be found here: https://legal.linkedin.com/pages-joint-controller-addendum. LinkedIn has agreed to assume responsibility regarding this processing and obligations regarding the guarantee of data subjects’ rights. More information can be found here: https://www.linkedin.com/help/linkedin/answer/a547077/linkedin-page-analytics-overview?lang=en.
This processing of personal data serves our legitimate interest in communication via the medium LinkedIn and the optimization of our offer on this medium. The legal basis for processing this data is our overriding legitimate interest in this processing pursuant to Art. 6 para. 1 lit. f) GDPR.
LinkedIn is responsible for the further processing of personal data in the context of the use of LinkedIn. Among other things, LinkedIn processes the data you voluntarily provide when using you LinkedIn account, such as your name, username, e-mail address and telephone number.
If you publish and share content on LinkedIn, LinkedIn can evaluate it to find out which topics you are interested in and to send you information about similar content and, if applicable, advertising.
In addition to that, LinkedIn also collects so-called log data such as your IP address, your browser type, the operating system you use, information about the website you previously visited and the pages you accessed, your location, your mobile phone provider, the end device you use, the search terms you used and cookie information. Please note that this data is also processed by LinkedIn if you do not have a LinkedIn account.
If you have a LinkedIn account, you may have the option the restrict the processing of your personal data by LinkedIn within the framework of the settings for your LinkedIn account.
We have no knowledge of and no influence on the scope and nature of the data processing and the further processing and use of your personal data by LinkedIn.
More information on data processing by LinkedIn here:
https://www.linkedin.com/legal/privacy-policy.
We expressly point out that the use of LinkedIn may result in the transfer of personal data to a country outside the EE/EEA (a so-called third country) where the level of protection of the GDPR regarding personal data cannot be guaranteed.
17.2. Xing
We would like to point out that you use Xing service and its functions on your own responsibility. This applies in particular to the use of interactive functions (e.g., sharing, commenting). Alternatively, you can also access the offered information via our offer on the internet at https://www.efb-elektronik.de/.
The data collected about you when using the service is processed by Xing and may be transferred to countries outside the European Union. This data includes your IP address, the application you use, details about the terminal device you use (including device ID and application ID), information about websites you have visited, your location and your mobile phone provider.
This data is assigned to the data of your Xing account or profile. We have no influence on the type and scope of the data processed by Xing, the type of processing and use of the transfer of this data to third parties. More information about which data is processed by Xing and for which purposes can be found in the Xing data protection declaration (https://privacy.xing.com/en/privacy-policy). To find out whether and which personal data is processed by Xing look here: (https://privacy.xing.com/de/datenschutzerklaerung/welche-rechte-koennen-sie-geltend-machen/auskunftsrecht).
We also process your data if you contact us via the Xing platform. In this case, Xing collects your data and makes it available to us. Under certain circumstances, we may also store and process your data further.
Data freely published and disseminated by you on Xing may be used by us and made available to third parties.
The click path function allows us to see hits from logged in users on our Xing page, including our job offers. If you do not want us to see that you have seen our offers, you should log out before accessing them.
There are options for you to restrict the processing of your data in the settings. In addition to that, you can restrict Xing’s access to contact and calendar data, photos, location data etc. on mobile devices (smartphones, tablet computers) in the setting options there. However, this depends on the operating system you use. Further information about this here: https://privacy.xing.com/de/ihre-privatsphaere.
If you have given your consent regarding the processing of the aforementioned data to the social network provider with effect for us, the legal basis is Art. 6 para. 1 lit. a) GDPR.
17.3. Facebook
Meta processes personal data of visitors of our Facebook page to provide the page. Processing is solely carried out by Meta. Therefore, Meta is also the sole controller responsible for this processing of personal data within the meaning of the GDPR. In this context, Meta processes, among other things, data that is collected each time the page is used. This includes data about the user IDs, the type of content users access, interactions with the site, information about the content and pages used. Further descriptions of the personal data processed are provided by Meta: https://www.facebook.com/privacy/policy/.
Website visitors can object to the processing of certain data by Meta. The objection options can be found here: https://www.facebook.com/privacy/guide/ads.
If we process personal data collected via our Facebook page, this is done through the data provided by Meta. Meta provides us with statistics for our page in form of anonymised “page insights” and with their help we can gain insights into the use of our Facebook offer. We have concluded a separate agreement with Meta for this purpose which can be viewed at: https://www.facebook.com/legal/terms/page_controller_addendum.
This agreement also regulates which security measures are taken by Meta and that users can contact Meta directly if they have questions regarding the data subject rights (e.g., information and deletion) mentioned in chapter three of the GDPR. These rights (in particular the rights concerning information, deletion and the right to be forgotten, objection and complaint to the competent supervisory authority) are not restricted by the agreement existing between us and Meta. These can be asserted both against us and against Meta. Further information can be found here: https://www.facebook.com/legal/terms/information_about_page_insights_data.
This processing of personal data serves our legitimate interest in communication via Facebook and the optimization of our offer there. The legal basis for this processing is our overriding legitimate interest in this processing pursuant to Art. 6 para. 1 lit. f) GDPR.
We expressly point out that, in accordance with Facebook’s data protection regulations, personal data of the users of our Facebook page may also be processed in the USA or other third countries, i.e. outside the European Union and thus outside the scope of protection of the GDPR. Meta assures that the processing of personal data of visitors to our Facebook page is processed in accordance with the requirements for a third country transfer according to Art. 44 ff GDPR. By visiting our Facebook page, you consent to the corresponding processing of your personal data.