The protection of your personal data is very important to us. For this reason, we handle your personal data re-sponsibly in all data processing operations and comply with the statutory data protection requirements, in particu-lar the provisions of the EU General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG).
1. Scope
This privacy policy provides you with an overview of the following information in particular:
• Which of your personal data is processed via our websites (hereinafter also referred to as the “Service”)?
• In what way, to what extent, for what purposes and on what legal basis is this data used?
• What security measures are in place to protect your data?
• How can you object to specific data processing activities carried out via our websites?
• How can you obtain details of the information you have provided to us and, where applicable, exercise any other data subject rights you are entitled to in relation to us?
2. Who is your point of contact (the data controller) for your data protection enquiry?
The data controller within the meaning of data protection legislation is:
e.solutions GmbH (“e.solutions”)
Despag-Straße 4a
85055 Ingolstadt
Telephone: +49 8458 3332-100
Fax: +49 8458 3332-333
www.esolutions.de
Chief Data Protection Officer: Claudia Langer
e.solutions GmbH
Legal
Despag-Straße 4a
85055 Ingolstadt, Germany
Tel: +49 8458 3332 3100
E-mail: datenschutzbeauftragter@esolutions.de
Please address any enquiries regarding data protection and the exercise of data subjects’ rights (see further down in this privacy policy) to our Data Protection Officer at the address given above.
3. On what legal basis can data be processed on our websites?
Where we seek your consent to the processing of personal data, the legal basis is Article 6(1)(a) of the GDPR.
Where personal data is processed in order to fulfil a contract to which you, as the data subject, are a party, the legal basis is Article 6(1)( b) of the GDPR. This also applies to processing operations necessary for the imple-mentation of pre-contractual measures.
Where the processing of personal data is necessary to fulfil a legal obligation to which we, as the data controller, are subject, Article 6(1)(c) of the GDPR serves as the legal basis.
Where the processing of personal data is necessary to protect your vital interests or those of another natural person, the legal basis is Article 6(1)(d) of the GDPR.
If processing is necessary to safeguard a legitimate interest of ours or of a third party, and your interests, fundamental rights and freedoms as a data subject do not override the former interest, Article 6(1)(f) of the GDPR serves as the legal basis for the processing.
You can find the specific legal basis applicable to each type of processing in the relevant section of this privacy policy.
4. What technical access data/server log files are collected and stored when our website is used?
We (or rather, our web hosting provider) collect and store your data every time you access the website (so-called server log files or system and usage data). Access data includes:
Name of the webpage accessed, file, date and time of access, amount of data transferred, notification of suc-cessful access, browser type and version, your operating system, referrer URL (the page visited previously), IP address and the internet service provider making the request.
The legal basis for the storage of this data and the log files is Article 6(1)(f) of the GDPR.
We use the log data solely for statistical analysis for the purposes of operation, security and optimisation of the service. However, we reserve the right to review the log data retrospectively if there are specific grounds for a reasonable suspicion of unlawful use. These purposes also constitute our legitimate interest in data processing pursuant to Article 6(1)(f) of the GDPR. No analysis for marketing purposes takes place in this context.
The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected. In the case of data collected for the purpose of providing the website, this is the case once the relevant session has ended. Where data is stored in log files, this occurs after 14 days at the latest. Data may be stored for a longer period. In this case, users’ IP addresses are deleted or anonymised so that it is no longer possible to identify the client making the request. Furthermore, in the event of misuse or, for example, a cyber-attack, the data will be stored until the matter has been fully clarified.
The collection of data for the purpose of providing the website and the storage of this data in log files is essential for the operation of the website.
5. How do we handle your personal data when you use our services?
Personal data is information that can be used to identify an individual, i.e. information that can be traced back to a specific person. These include your name, email address or telephone number. However, data relating to prefe-rences, hobbies, memberships or the websites a person has visited also constitutes personal data.
We will only collect, use and disclose personal data where this is permitted by law or where you have consented to the collection and use of such data.
We would like to point out that, on the instructions of the competent authority, we are entitled, in individual cases, disclose data where this is necessary for the purposes of criminal prosecution, for the prevention of danger by the police authorities of the federal states, for the fulfilment of the statutory duties of the federal and state constitutio-nal protection authorities, the Federal Intelligence Service or the Military Counter-Intelligence Service, or for the enforcement of intellectual property rights. The legal basis for this is Article 6(1)(c) of the GDPR.
6. Getting in touch
When you contact us (for example, by telephone or email), your details will be stored for the purpose of pro-cessing your enquiry and in case any follow-up questions arise.
The legal basis for the processing of data transmitted when sending an email is Article 6(1)(f) of the GDPR. If the purpose of establishing contact is to conclude a contract, the additional legal basis for the processing is Artic-le 6(1) (b) of the GDPR.
We process the personal data provided when you contact us solely for the purpose of dealing with your enquiry. Where contact is made by email, this also constitutes the necessary legitimate interest in the processing of the data. The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected. This is the case once the conversation with the user has ended. The conversation is deemed to have ended when it is clear from the circumstances that the matter in question has been conclusively resolved.
Right to object
The user may object to the processing of their personal data at any time by writing to the above address. In such a case, the conversation cannot continue. In this case, all personal data stored when you first made contact will be deleted.
7. Speculative application
If you apply to us on your own initiative by email, , we will store the data and documents you have sent us for subsequent review and possible further use in the recruitment process and in the decision on whether to enter into an employment relationship. We use the applicant tracking system “onlyfy one” provided by New Work SE (Am Strandkai 1, 20457 Hamburg), in which your application details are also stored. For information on data processing using onlyfy one and other processing activities involved in the application process, please see Ras part of our privacy policy for the application process, which you can find here.
8. What security measures have we put in place to protect your data?
We maintain up-to-date technical measures to ensure data security, in particular to protect your personal data from risks associated with data transmission and from unauthorised access by third parties. These are each adapted in line with the current state of the art.
The databases forming part of our service are protected by physical, technical and procedural measures which restrict access to the information to specifically authorised persons in accordance with this privacy policy. The information system for our service is protected by a software firewall to prevent access from other networks connected to the internet. Only employees and agents who require this information to carry out a specific task are granted access to personal data. Staff and representatives are trained in security and data protection practices.
Standardised SSL encryption technology is used when collecting and transmitting data via our website.
9. Use of cookies: What does this mean for my data?
When you use our website, so-called cookies are used.
Cookies are small files that enable specific, device-related information to be stored on your device (PC, smart-phone, etc.). The cookie we use is designed to enable your browser to recognise that frame rates have been successfully loaded by the browser. You can control the use of cookies. Most browsers have an option that al-lows you to restrict or completely prevent cookies from being stored. However, please note that the use of our websites – and, in particular, the user experience – will be restricted without cookies.
This website uses cookies as follows:
• Essential temporary cookies
We use cookies that are necessary for the proper functioning of our website. This means that our website cannot function without these cookies. We set the ‘Typo3 loading screen’ cookie, known as ‘preLoader’, as a necessary cookie. Cookies from the Typo3 loading screen are used to display our website to you and expire once you leave our website.
The legal basis for essential cookies is Section 25(2)(2) of the TDDDG, and the legal basis for the processing of personal data in this context is Article 6(1)(f) of the GDPR. Our legitimate interests are the display of our website content.
10. Rights of those affected
Upon request, e.solutions will, in accordance with Article 15 of the GDPR, provide you with information at any time regarding which personal data relating to you is stored by e.solutions. You also have the right at any time to request that e.solutions rectify your personal data in accordance with Article 16 of the GDPR, erase it in ac-cordance with Article 17 of the GDPR, or restrict the processing of your data in accordance with Article 18 of the GDPR. Under Article 20 of the GDPR, you have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract provided to you or to a third party in a commonly used, machine-readable format. If you request that your data be transferred directly to another data controller, this will only be done to the extent that it is technically feasible. The only data exempt from deletion is that which e.solutions re-quires to carry out outstanding tasks or to enforce existing rights and claims, as well as data which e.solutions is required to retain under statutory provisions. However, such data is blocked.
You also have the right, under Article 77 of the GDPR, to lodge a complaint with a data protection supervisory authority.
If you have given e.solutions your consent to the processing of personal data in connection with your use of e.solutions’ services, you may withdraw this consent at any time in accordance with Article 7(3) of the GDPR. The withdrawal may be sent by email to the following email address: datenschutzbeauftragter@esolutions.de or in writing to the address given above. The effects of the withdrawal are limited to the storage and use of personal data which may not already be stored and used without your consent on the basis of statutory grounds for autho-risation. Such a withdrawal will affect the lawfulness of the processing of your personal data from the moment you notify us of it. Please note, however, that in this case it may no longer be possible to process the data in question in the future.
Where we base the processing of your personal data on a balancing of interests, you may object to such processing in accordance with Article 21 of the GDPR. This is the case where, in particular, the proces-sing is not necessary for the performance of a contract with you. If you wish to exercise such a right to object, please state the reasons why we should not process your personal data in the manner we have been doing. In the event of a justified objection on your part, we will examine the circumstances and either cease or adjust the data processing, or explain to you the compelling legitimate grounds on which we are continuing the processing. Should you exercise your right to object, the data controller will no longer process your personal data, unless there are compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defence of legal claims.
You may, of course, object at any time to the processing of your personal data for the purposes of marketing and data analysis. You can notify us of your objection to advertising by emailing us at the following address: daten-schutzbeauftragter@esolutions.de or by writing to the address given above.