Privacy policy

The processing of personal data, such as the name, address, e-mail address, or telephone number of a data subject shall always be in line with the General Data Protection Regulation (GDPR), and in accordance with the country-specific data protection regulations applicable to the ekvip automation GmbH. By means of this data protection declaration, our company would like to inform the public about the type, scope and purpose of the personal data we collect, use and process. Furthermore, data subjects are informed of their rights by means of this privacy policy.

As the controller, the ekvip automation GmbH has implemented numerous technical and organizational measures to ensure the most complete protection of personal data processed through this website. Nevertheless, Internet-based data transmissions can generally have security gaps, so that absolute protection cannot be guaranteed. For this reason, every data subject is free to transmit personal data to us by alternative means, for example by telephone.

1. Definitions

The data protection declaration of the ekvip automation GmbH is based on the terms used by the European legislator for the adoption of the General Data Protection Regulation (GDPR). Our privacy policy should be easy to read and understand for the public as well as for our customers and business partners. To ensure this, we would like to explain the terms used in advance.

We use the following terms, among others, in this privacy policy:

personal data: Personal data means any information relating to an identified or identifiable natural person (hereinafter "data subject"). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Data subject: The data subject is any identified or identifiable natural person whose personal data is processed by the controller.

Processing: Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Restriction of processing: is the marking of stored personal data with the aim of restricting its future processing.

Profiling: means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location or movements.

Pseudonymization: is the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.

Controller or controller responsible for the processing: means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.

Processor: is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

Recipient: means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients.

Third party: means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorized to process personal data.

Consent: means any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

2. Name and contact details of the controller and the data protection officer

This privacy policy applies to data processing by

ekvip automation GmbH

Geschäftsführende Gesellschafterin: Katja Wachsmuth
Nonnenstraße 37 04229 Leipzig

HRB

T +49 341 49256040 | F +49 89 23 88 57 400

E-Mail: info@ekvip.de| Internet: www.ekvip.de

3. Collection and storage of personal data and the nature and purpose of their use

When you visit our website, the browser used on your device automatically sends information to the server of our website . This information is temporarily stored in a so-called log file. The following information is collected without any action on your part and stored until it is automatically deleted:

  • IP address

  • Date and time of the request

  • Content of the request (specific page)

  • Access status/HTTP status code

  • Amount of data transferred in each case

  • Website from which the request comes

  • Browser type and version

  • Operating system and its interface

  • Language and version of the browser software

  • Name of the website accessed

  • Notification of successful retrieval

We process the aforementioned data for the following purposes:

  • Ensuring a smooth connection to the website,

  • To ensure a comfortable use of our website,

  • Evaluation of system security and stability and

  • for other administrative purposes.

This anonymously collected data and information is therefore evaluated by us both statistically and with the aim of increasing data protection and data security in our company in order to ultimately ensure an optimal level of protection for the personal data processed by us. The anonymous data of the server log files are stored separately from all personal data provided by a data subject.

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest follows from the purposes for data collection listed above. Under no circumstances do we use the data collected for the purpose of drawing conclusions about your person.

We also use cookies and analysis services when you visit our website. You can find more detailed explanations on this in sections 6 and 7 of this privacy policy.

Contact via the website or by e-mail: Due to legal regulations, our website contains information that enables quick electronic contact to our company and direct communication with us, which also includes a general address for so-called electronic mail (e-mail address). If a data subject contacts us by email or via a contact form, the personal data transmitted by the data subject will be stored automatically. Such personal data transmitted on a voluntary basis by a data subject to the controller are stored for the purposes of processing or contacting the data subject. This personal data is not passed on to third parties.

Data processing for the purpose of contacting us is carried out in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR on the basis of your voluntarily given consent.

The personal data collected by us for contacting you will be deleted after your request has been dealt with.

Registration on our website: If you register on our website by providing personal data, the personal data shown on the respective input screen will be transmitted to us. The personal data entered by the data subject is collected and stored exclusively for internal use by the controller and for its own purposes. The controller may arrange for the data to be passed on to one or more processors, such as a parcel service provider, who will also use the personal data exclusively for internal use attributable to the controller.

By registering on our website, the IP address assigned by the data subject's internet service provider (ISP), the date and time of registration are also stored. This data is stored against the background that this is the only way to prevent misuse of our services and, if necessary, to enable criminal offenses to be investigated. In this respect, the storage of this data is necessary to safeguard the controller. This data is not passed on to third parties unless there is a legal obligation to pass it on or it serves the purpose of criminal prosecution.

The registration of the data subject with the voluntary provision of personal data enables us to offer the data subject content or services which, due to the nature of the matter, can only be offered to registered users. Registered persons are free to change the personal data provided during registration at any time or to have it completely deleted from the controller's database.

The controller shall provide any data subject at any time upon request with information about what personal data is stored about the data subject. Furthermore, the controller shall rectify or erase personal data at the request or indication of the data subject, insofar as this does not conflict with any statutory retention obligations.

4. Disclosure of data

Your personal data will not be transferred to third parties for purposes other than those listed below.

We only pass on your data to third parties if:

  • the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR is necessary for the assertion, exercise or defense of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data,

  • in the event that there is a legal obligation for disclosure pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR, or

  • this is legally permissible and necessary for the processing of contractual relationships with you in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR or for the initiation of contractual relationships with you at your request, or, if applicable

  • on the basis of your express consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR

5. Applications / unsolicited applications

ekvip automation GmbH attaches great importance to the protection of your personal data. We therefore inform you about our handling of your data and the statutory data protection regulations in order to enable you to have a trustworthy application process. Please read the following information carefully before submitting your data to us.

If you wish to submit an online application, this requires you to provide certain personal data marked as mandatory in the online application form. You also have the option of providing additional voluntary information and submitting application documents. You only need to provide the data that is required for processing your application or for a pre-contractual relationship with us or that we are legally obliged to collect.

The data and files ("data") provided by you will only be transmitted to us if you have declared by clicking the checkbox that you agree to the collection and processing of your personal data in accordance with the data protection regulations for applications. Data transmission is encrypted (https encryption).

If you send us an application by email, we collect the same data from the data sent to us.

The data subject to processing are, for example, your surname, first name, date of birth, place of birth, contact details, any application photos you may have submitted, qualifications (educational qualifications, professional career, knowledge, skills), information in your CV, any profile data from social media (e.g. Linked-In, XING) and other application-relevant data and any special categories of personal data you may have provided (e.g. photograph, severely disabled status, etc.).

The data you submit during the application process will be processed by us in order to review your application, to contact you and to be able to offer you suitable positions and, if necessary, to implement an employment relationship (purposes of the employment relationship).

ekvip automation GmbH provides services both in its own technical offices and at or in cooperation with client companies (contract for work and services, service contract, temporary employment, together "projects"). In individual cases, it also provides personnel placement services. You can select whether you are available for the latter in the applicant management system, as well as the desired scope of your activity.

The data is passed on to our business partners, where necessary, in order to compare possible applications in projects with these business partners. Where possible, this is done in pseudonymized or anonymized form. The business partners are legally and contractually obliged to protect your data with regard to us and you.

Your personal data is processed for the purpose of initiating and, if necessary, concluding and implementing an employment relationship, Art. 6 para. 1 lit b GDPR, § 26 BDSG (purpose 1) and in this context for the purpose of initiating or implementing a contractual relationship between ekvip automation GmbH and its customers in accordance with Art. 6 para. 1 lit b GDPR (purpose 2), as well as for the fulfillment of legal requirements in accordance with Art. 6 para. 1 lit c GDPR (purpose 3).

The data processed by us will be stored until the purpose of processing no longer applies and then until the expiry of any retention periods.

If you choose the option to be informed about job offers that go beyond your specific application by giving your consent, your applicant profile will be stored in the applicant management system for an initial period of three years and then for a further year after your contact with us, but at the longest until you revoke this consent.

You have the right to object to the storage of your data at any time. After receipt of your objection, your data will be deleted. This does not apply if statutory provisions (e.g. §§ 238, 257 HGB; § 147 AO) prevent deletion or if further storage is required for evidence purposes (Art. 17 para. 3 lit. 3 GDPR).

To maintain the data, we sometimes use the services of companies based outside the EU (order processing). However, even in this case, the data is processed in accordance with our high data protection standards and stored and processed exclusively on servers in Germany.

All data collected and processed by us as part of an application process is protected against unauthorized access and manipulation by technical and organizational measures. The data and files sent to us are transmitted in encrypted form to prevent misuse by third parties.

Purely automated decision-making within the meaning of Art. 22 GDPR does not take place.

Any consent you have given to the storage and use of your personal data and files can be revoked at any time with effect for the future. Please send your revocation to: ekvip automation GmbH Nonnenstraße 37 04229 Leipzig or by e-mail to info@ekvip.de

You are also entitled to the rights listed in sections 11 and 12.

You are also welcome to send us unsolicited applications. Please ensure that the transmission method you choose is sufficiently secure. Sending an e-mail without a suitable encryption method is not recommended, as your data could then be read and used by unauthorized persons without much effort. Therefore, please use the option offered to send us an unsolicited application at

After successful completion of the application process, your data and files will continue to be used in the context of an employment relationship. In this case, your data will be forwarded to and processed by social security institutions, tax offices, the law and tax firm responsible for payroll accounting and financial institutions for payment processing. In the case of participation in support measures or projects of the Federal Employment Agency or other institutions for company qualification, ekvip automation GmbH is entitled to transfer personal data to the corresponding institution, insofar as this is necessary to achieve the purpose of the measures and/or is required by law.

6. Cookies

We use cookies on our website. These are small files that your browser automatically creates and that are stored on your end device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not cause any damage to your end device and do not contain any viruses, Trojans or other malware.

Information is stored in the cookie that results in each case in connection with the specific end device used. However, this does not mean that we obtain direct knowledge of your identity.

On the one hand, the use of cookies serves to make the use of our website more pleasant for you. For example, we use so-called session cookies to recognize that you have already visited individual pages of our website. These are automatically deleted after you leave our site.

In addition, we also use temporary cookies to optimize user-friendliness, which are stored on your end device for a specified period of time. If you visit our site again in order to use our services, it is automatically recognized that you have already visited us and which entries and settings you have made so that you do not have to enter them again.

On the other hand, we use cookies to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer for you (see section 6). These cookies enable us to automatically recognize that you have already visited our website when you visit it again. These cookies are automatically deleted after a defined period of time.

The data processed by cookies are necessary for the purposes mentioned to protect our legitimate interests and those of third parties in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR.

Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or a message always appears before a new cookie is created. However, completely deactivating cookies may mean that you cannot use all the functions of our website.

7. Analysis tools

This website uses the open source web analysis service Matomo. Matomo uses technologies that enable the cross-page recognition of the user to analyze user behavior (e.g. cookies or device fingerprinting). The information collected by Matomo about the use of this website is stored on our server. The IP address is anonymized before it is stored.

With the help of Matomo, we are able to collect and analyze data about the use of our website by website visitors. This enables us to find out, among other things, when which pages were accessed and from which region. We also record various log files (e.g. IP address, referrer, browser and operating system used) and can measure whether our website visitors perform certain actions (e.g. clicks, etc.).

This analysis tool is used on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the anonymized analysis of user behavior in order to optimize both its website and its advertising. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.

We use IP anonymization for the analysis with Matomo. This means that your IP address is shortened before the analysis so that it can no longer be clearly assigned to you. We host Matomo exclusively on our own servers so that all analysis data remains with us and is not passed on.

11. Rights of data subjects

You have the right:

§ pursuant to Art. 15 GDPR to request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;

§ In accordance with Art. 16 GDPR, you have the right to demand the immediate correction of incorrect or incomplete personal data stored by us;

§ to demand the erasure of your personal data stored by us in accordance with Art. 17 GDPR, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims.

§ to demand the restriction of the processing of your personal data in accordance with Art. 18 GDPR, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to delete it and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR;

§ in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller;

§ In accordance with Art. 7 para. 3 GDPR, you have the right to withdraw your consent at any time. The consequence of this is that we may no longer continue the data processing that was based on this consent in the future and

§ pursuant to Art. 77 GDPR to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters.

12. Right of objection

If your personal data is processed on the basis of legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided that there are reasons for this arising from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right to object, which will be implemented by us without specifying a particular situation.

If you wish to exercise your right of revocation or objection, simply send an e-mail to info@ekvip.de.

13. Legal basis of the processing

Art. 6 I lit. a GDPR serves our company as the legal basis for processing operations for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is party, as is the case, for example, when processing operations are necessary for the supply of goods or to provide any other service or consideration, the processing is based on Art. 6 I lit. b GDPR. The same applies to such processing operations that are necessary to carry out pre-contractual measures, for example in cases of inquiries about our products or services. If our company is subject to a legal obligation which requires the processing of personal data, such as for the fulfillment of tax obligations, the processing is based on Art. 6 I lit. c GDPR. In rare cases, the processing of personal data may become necessary in order to protect the vital interests of the data subject or another natural person. This would be the case, for example, if a visitor were injured in our company and their name, age, health insurance details or other vital information would have to be passed on to a doctor, hospital or other third party. The processing would then be based on Art. 6 I lit. d GDPR. Ultimately, processing operations could be based on Art. 6 I lit. f GDPR. This legal basis is used for processing operations which are not covered by any of the abovementioned legal grounds, if processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data. We are permitted to carry out such processing operations in particular because they have been specifically mentioned by the European legislator. In this respect, it took the view that a legitimate interest could be assumed if the data subject is a customer of the controller (Recital 47 Sentence 2 GDPR). Where the processing of personal data is based on Article 6 I lit. f GDPR, our legitimate interest is to carry out our business in favor of the well-being of all our employees and our shareholders.

14. Duration for which the personal data is stored

The criterion for the duration of the storage of personal data is the respective statutory retention period. After this period has expired, the corresponding data is routinely deleted, provided that it is no longer required for contract fulfillment or contract initiation.

15. Data security

We use the widespread SSL (Secure Socket Layer) method in conjunction with the highest level of encryption supported by your browser when you visit our website. As a rule, this is 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is transmitted in encrypted form by the closed display of the key or lock symbol in the lower status bar of your browser.

We also use suitable technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

16. Topicality and amendment of this privacy policy

This privacy policy is currently valid and was last updated in April 2020.

It may become necessary to amend this privacy policy as a result of the further development of our website and offers on it or due to changes in legal or official requirements. You can access the current privacy policy at any time on our website.

ekvip automation GmbH | 07.04.2020