Privacy Policy


1. Privacy Policy Summary


General information

The following information will provide you with a simple summary of what happens to your personal data when you visit this website. The term “personal data” refers to all data that may be used to personally identify you. For more detailed information on the topic of data protection, please refer to our Privacy Policy below.


Data collection on this website

Who is responsible for the collection of data on this website?

The data on this website is processed by the operator of the website, whose contact information can be found in the Legal Notice for this website.


How do we collect your data?

This occurs, on the one hand, by you sharing your data with us, for example, when you enter your data into a contact form.

Other data is collected automatically, or with your consent, by our IT systems when you visit this website. This data consists primarily of technical information (e.g., web browser, operating system or the time at which the page was accessed). The collection of this data occurs automatically as soon as you access this website.


What do we use your data for?

Part of the data is collected to ensure an error-free rendition of the website. Other data may be used to analyse your user behaviour.


What are your rights regarding your data?

You have the right to request information on the sources, recipients and purposes of your archived personal data free of charge at any time. In addition, you also have the right to request the correction or deletion of this data. If you have consented to the processing of your data, you may revoke this consent for any future processing of your data at any time. Furthermore, you have the right to request that the processing of your personal data be restricted under certain circumstances. You also have the right to file a complaint to the competent supervisory authority.

Please do not hesitate to contact us at any time at the address provided in the Legal Notice section of this website should you have any further questions concerning this or any other data protection issues.


Analysis tools and third-party tools

When you visit this website, your browsing behaviour may be the subject of statistical analysis. Such analysis is performed mainly by analysis tools.

For detailed information on these analysis tools and the programs used, please refer to the Privacy Policy below.


2. Hosting and Content Delivery Networks (CDN)

External hosting

This website is hosted by an external service provider (host). The personal data collected on this website is stored on the servers of the host. This data consists mainly of IP addresses, contact requests, metadata and communication data, contract information, contact information, names, web page views and other data generated by a website.

The host is used in order to fulfil contracts with our prospective and existing customers (Section 6(1)(b) GDPR) and in the interest of providing secure, fast and efficient online services by a professional provider (Section 6(1)(f) GDPR).

Our host will only process your data to the extent necessary to fulfil its performance obligations and follow our instructions with respect to such data.

We use the following host:

[Name and full address of the host]


Conclusion of an order processing contract

We have concluded an order processing contract with our host in order to ensure processing in compliance with data protection regulations.


3. General information and required information

Data protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data as confidential and in accordance with statutory data protection regulations and this Privacy Policy.

A wide range of personal data is collected whenever you access this website. The term “personal data” refers to all data that may be used to personally identify you. This Privacy Policy explains which data is collected and what it is used for. It also explains how, and for what purpose, this occurs.

We would also like to inform you that the transmission of data via the Internet (e.g., when communicating by e-mail) may also be subject to security risks and that it is impossible to fully protect data against unauthorised access by third parties.


Information on the responsible party (controller)

The data processing controller for this website is:

Emons Spedition GmbH
Poll-Vingster Strasse 107a
51105 Cologne
Germany

Tel.: +49 221 983510
e-mail:  stellenanzeigen@emons-hr.com

The controller is the natural person or legal entity who, single-handedly or in unison with others, is responsible for making the decisions on the purposes and processing of personal data (e.g., names, e-mail addresses, etc.).


Storage duration

Unless a more specific storage period has been otherwise specified in this Privacy Policy, your personal data will be stored with us until the purpose for which it was collected no longer applies. If you submit a legitimate request for deletion or revoke your consent to data processing, your data will be deleted, unless we have other legally permissible reasons for storing your personal data (e.g. fiscal or commercial retention periods prescribed by law); in the latter case, the data will be deleted once these reasons have ceased to apply.


Designation of a data protection officer as prescribed by law

We have appointed a data protection officer for our company.

Manuel Bohé
Concepture GmbH
Erlenstr. 13
77815 Bühl/Baden
Germany

Tel.: +49 7223 808479-0
e-mail: datenschutzbeauftragter@emons.de


Information on the transfer of data to the USA

Our website uses, among other things, tools from companies based in the USA. When these tools are active, your personal data may be transferred to the US servers of these companies. We would like to point out that the USA is not a secure third country within the sense of EU data protection law. US companies are required to disclose personal data to security authorities without you as the subject of such data being able to take legal action against this. It therefore cannot be excluded that US authorities (e.g., intelligence services) may process, evaluate and permanently store your data on US servers for surveillance purposes. We have no influence on these processing activities.


Revocation of your consent to the processing of data

Many data processing operations require your express consent. You may revoke your consent at any time. The legality of any processing that occurred until such a time as consent was revoked, however, remains unaffected.


Right to object to the collection of data in special cases; right to object to direct advertising (Art. 21 GDPR)

IN THE EVENT THAT DATA IS PROCESSED ON THE BASIS OF ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO AT ANY TIME OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA BASED ON GROUNDS ARISING FROM YOUR UNIQUE SITUATION. THIS ALSO APPLIES TO ANY PROFILING BASED ON THESE PROVISIONS. TO DETERMINE THE LEGAL BASIS, ON WHICH ANY PROCESSING OF DATA IS BASED, PLEASE CONSULT THIS PRIVACY POLICY. IF YOU FILE AN OBJECTION, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA, UNLESS WE ARE IN A POSITION TO PRESENT COMPELLING PROTECTION WORTHY GROUNDS FOR THE PROCESSING OF YOUR DATA, THAT OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS OR IF THE PURPOSE OF THE PROCESSING IS THE CLAIMING, EXERCISING OR DEFENCE OF LEGAL ENTITLEMENTS (OBJECTION PURSUANT TO ART. 21(1) GDPR).

IF YOUR PERSONAL DATA IS BEING PROCESSED IN ORDER TO ENGAGE IN DIRECT ADVERTISING, YOU HAVE THE RIGHT TO AT ANY TIME OBJECT TO THE PROCESSING OF YOUR AFFECTED PERSONAL DATA FOR THE PURPOSES OF SUCH ADVERTISING. THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS AFFILIATED WITH SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR DIRECT ADVERTISING PURPOSES (OBJECTION PURSUANT TO ART. 21(2) GDPR).


Right to file a complaint with the competent supervisory agency

In the event of violations of the GDPR, data subjects are entitled to file a complaint with a supervisory agency, in particular in the member state where they usually maintain their domicile, place of work or at the place where the alleged violation occurred. The right to file a complaint is in effect regardless of any other administrative or court proceedings available as legal recourses.


Right to data portability

You have the right to demand that any data we automatically process on the basis of your consent or in order to fulfil a contract be handed over to you or a third party in a commonly used, machine readable format. If you should demand the direct transfer of the data to another controller, this will be done only if it is technically feasible.


SSL and/or TLS encryption

For security reasons and to protect the transmission of confidential content, such as purchase orders or inquiries you submit to us as the website operator, this website uses either an SSL or a TLS encryption program. You can recognise an encrypted connection by checking whether the address line of the browser switches from “http://” to “https://” and also by the appearance of the lock icon in the navigation bar.

If the SSL or TLS encryption is activated, data that you transmit to us cannot be read by third parties.


Information about, rectification and eradication of data

Within the scope of the applicable statutory provisions, you have the right to at any time demand information about your archived personal data, their source and recipients as well as the purpose of the processing of your data. You may also have a right to have your data rectified or eradicated. If you have questions about this subject matter or any other questions about personal data, please do not hesitate to contact us at any time.


Right to demand processing restrictions

You have the right to demand the imposition of restrictions as far as the processing of your personal data is concerned. To do so, you may contact us at any time at the address provided in the Legal Notice section of this website. The right to demand the restriction of processing applies in the following cases:

  • In the event that you should dispute the correctness of your data archived by us, we will usually need some time to verify this claim. During the time that this investigation is ongoing, you have the right to demand that we restrict the processing of your personal data.
  • If the processing of your personal data was/is conducted in an unlawful manner, you have the option to demand the restriction of the processing of your data in lieu of demanding the eradication of this data.
  • If we do not need your personal data any longer and you need it to exercise, defend or claim legal entitlements, you have the right to demand the restriction of the processing of your personal data instead of its eradication.
  • If you have raised an objection pursuant to Art. 21(1) GDPR, your rights and our rights will have to be weighed against each other. As long as it has not been determined whose interests prevail, you have the right to demand a restriction of the processing of your personal data.

If you have restricted the processing of your personal data, this data – with the exception of its archiving – may be processed only subject to your consent or to claim, exercise or defend legal entitlements or to protect the rights of other natural persons or legal entities or for important public interest reasons cited by the European Union or a member state of the EU.


4. Recording of data on this website

Cookies

Our websites and pages use what the industry refers to as “cookies”. Cookies are small text files that do not cause any damage to your device. They are either stored temporarily for the duration of a session (session cookies) or they are permanently archived on your device (permanent cookies). Session cookies are automatically deleted once you terminate your visit. Permanent cookies remain archived on your device until you actively delete them, or they are automatically deleted by your web browser.

In some cases, it is possible that third-party cookies are stored on your device when you access our site (third-party cookies). These cookies enable you or us to take advantage of certain services offered by the third party (e.g., cookies for the processing of payment services).

Cookies have a variety of functions. Many cookies are technically essential since certain website functions would not work without them (e.g., the shopping cart function or the display of videos). The purpose of other cookies may be the analysis of user behaviour or the display of promotional messages.

Cookies, which are required for the performance of electronic communication transactions, or for the provision of certain functions you want to use (e.g., for the shopping cart function) or those that are necessary for the optimisation (required cookies) of the website (e.g., cookies that provide measurable insights into the web audience), shall be stored on the basis of Art. 6(1)(f) GDPR, unless a different legal basis is cited. The operator of the website has a legitimate interest in the storage of required cookies to ensure the technically error free and optimised provision of the operator’s services. If your consent to the storage of the cookies has been requested, processing occurs exclusively on the basis of the consent obtained (Art. 6(1)(a) GDPR); this consent may be revoked at any time.

You have the option to set up your browser in such a manner that you will be notified any time cookies are placed and to permit the acceptance of cookies only in specific cases. You may also exclude the acceptance of cookies in certain cases or in general, or activate the delete function for the automatic deletion of cookies when the browser closes. If cookies are deactivated, the functions of this website may be limited.

In the event that third-party cookies are used or if cookies are used for analytical purposes, we will notify you separately in conjunction with this Privacy Policy and, if applicable, ask for your consent.


Server log files

The provider of this website and its pages automatically collects and stores information in so-called server log files, which your browser communicates to us automatically. The information comprises:

  • The type and version of browser used
  • The used operating system
  • Referrer URL
  • The hostname of the accessing computer
  • The time of the server inquiry
  • The IP address

This data is not merged with other data sources.

This data is recorded on the basis of Art. 6(1)(f) GDPR. The operator of the website has a legitimate interest in the technically error free depiction and optimisation of the operator’s website. In order to achieve this, server log files must be recorded.


Contact form

If you submit inquiries to us via our contact form, the information provided in the contact form as well as any contact information provided therein will be stored by us in order to handle your inquiry and in the event that we have further questions. We will not share this information without your consent.

The processing of this data is based on Art. 6(1)(b) GDPR, in so far as your request is related to the execution of a contract or it is necessary to carry out pre-contractual measures. In all other cases the processing is based on our legitimate interest in the effective processing of the requests addressed to us (Art. 6(1)(f) GDPR) or on your agreement (Art. 6(1)(a) GDPR) if this has been requested.

The information you have entered into the contact form shall remain with us until you ask us to eradicate the data, revoke your consent to the archiving of data or if the purpose for which the information is being archived no longer exists (e.g., after we have concluded our response to your inquiry). This shall be without prejudice to any mandatory legal provisions, in particular retention periods.


Request by e-mail, telephone or fax

If you contact us by e-mail, telephone or fax, your request, including all resulting personal data (name, request) will be stored and processed by us for the purpose of processing your request. We do not pass this data on without your consent.

The data is processed on the basis of Art. 6(1)(b) GDPR if your inquiry is related to the fulfilment of a contract or is required for the performance of pre-contractual measures. In all other cases the processing is based on our legitimate interest in the effective processing of the requests addressed to us (Art. 6(1)(f) GDPR) or on your agreement (Art. 6(1)(a) GDPR) if this has been requested.

The data sent by you to us via contact requests remain with us until you request us to delete, revoke your consent to the storage or the purpose for the data storage lapses (e.g., after completion of your request). Mandatory statutory provisions - in particular statutory retention periods - remain unaffected.


5. Analysis tools and advertising

Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider of this service is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables the website operator to analyse the behaviour patterns of website visitors. To that end, the website operator receives a variety of user data, such as pages accessed, time spent on the page, the utilised operating system and the user’s origin. Google may consolidate these data in a profile that is allocated to the respective user or the user’s device.

Google Analytics uses technologies that enable the recognition of the user for the purpose of analysing the user behaviour patterns (e.g., cookies or device fingerprinting). The website usage information recorded by Google is, as a rule transferred to a Google server in the United States, where it is stored.

The use of this analysis tool is based on Art. 6(1)(f) GDPR. The operator of this website has a legitimate interest in the analysis of user behaviour, in order to optimise both its website and advertising. If appropriate consent has been obtained (e.g., consent to the storage of cookies), the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR; this consent may be revoked at any time.

Data transmission to the USA is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.


IP anonymisation

We have activated the IP anonymisation function on this website. As a result, your IP address will be abbreviated by Google within the member states of the European Union or in other states that have ratified the Convention on the European Economic Area prior to its transmission to the United States. The full IP address will be transmitted to one of Google’s servers in the United States and abbreviated there only in exceptional cases. On behalf of the operator of this website, Google shall use this information to analyse your use of this website, to generate reports on website activities and to render other services to the operator of this website that are related to the use of the website and the Internet. The IP address transmitted in conjunction with Google Analytics from your browser shall not be merged with other data in Google’s possession.


Browser plug-in

You can prevent the recording and processing of your data by Google by downloading and installing the browser plug-in available under the following link:  https://tools.google.com/dlpage/gaoptout?hl=en-GB.

For more information about the handling of user data by Google Analytics, please consult Google’s Data Privacy Declaration at:  https://support.google.com/analytics/answer/6004245?hl=en.


Contract data processing

We have concluded a contract data processing agreement with Google and implement the stringent provisions of the German data protection agencies to the fullest when using Google Analytics.


Archiving period

Data on the user or incident level stored by Google linked to cookies, user IDs or advertising IDs (e.g., DoubleClick cookies, Android advertising ID) will be anonymised or deleted after 14 months. For details please click on the following link:  https://support.google.com/analytics/answer/7667196?hl=en


6. Plug-ins and tools

YouTube

This website embeds videos of the website YouTube. The website operator is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

If you visit a page on this website into which a YouTube video has been embedded, a connection with YouTube’s servers will be established. As a result, the YouTube server will be notified, which of our pages you have visited.

Furthermore, YouTube will be able to place various cookies on your device or comparable technologies for recognition (e.g., device fingerprinting). In this way YouTube will be able to obtain information about this website’s visitors. Among other things, this information will be used to generate video statistics with the aim of improving the user friendliness of the site and to prevent attempts to commit fraud.

If you are logged into your YouTube account while you visit our site, you enable YouTube to directly allocate your browsing patterns to your personal profile. You have the option to prevent this by logging out of your YouTube account.

The use of YouTube is based on our interest in presenting our online content in an appealing manner. Pursuant to Art. 6(1)(f) GDPR, this is a legitimate interest. If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR; this consent may be revoked at any time.

For more information on how YouTube handles user data, please consult the YouTube Data Privacy Policy at: https://policies.google.com/privacy?hl=de.


7. Online-based audio and video conferences

Data processing

We use online conferencing tools, among other things, for communication with our customers. The tools we use are listed in detail below. If you communicate with us by video or audio conference using the Internet, your personal data will be collected and processed by the provider of the respective conferencing tool and by us.

The conferencing tools collect all information that you provide/access to use the tools (email address and/or your phone number). Furthermore, the conferencing tools process the duration of the conference, start and end (time) of participation in the conference, number of participants and other “contextual information” related to the communication process (metadata).

Furthermore, the provider of the tool processes all the technical data required for the processing of the online communication. This includes, in particular, IP addresses, MAC addresses, device IDs, device type, operating system type and version, client version, camera type, microphone or loudspeaker and the type of connection.

If content is exchanged, uploaded or otherwise made available within the tool, this is also stored on the servers of the tool providers. Such content includes, but is not limited to, cloud recordings, chat/instant messages, voice mails uploaded photos and videos, files, whiteboards and other information shared while using the service.

Please note that we do not have full control over the data processing operations of the tools used. Our options are largely determined by the corporate policy of the respective provider. For further information on data processing by the conferencing tools, please refer to the privacy policies of the respective tools used, which we have listed below this text.


Purpose and legal basis

The conference tools are used to communicate with prospective or existing contractual partners or to offer certain services to our customers (Art. 6(1)(b) GDPR). Furthermore, the use of the tools serves the general simplification and acceleration of communication with us or our company (legitimate interest within the meaning of Art. 6(1)(f) GDPR). Insofar as consent has been requested, the tools in question are used on the basis of this consent; consent can be revoked at any time with effect for the future.


Duration of storage

The data collected directly by us via the video and conferencing tools will be deleted from our systems as soon as you request us to delete it, revoke your consent to store it or the purpose for storing the data no longer applies. Stored cookies remain on your end device until you delete them. Mandatory statutory retention periods remain unaffected.

We have no influence on the storage period of your data, which is stored by the operators of the conference tools for their own purposes. For details on this matter, please contact the operators of the conference tools directly.


Conferencing tools used

We use the following conferencing tools:


TeamViewer

We use TeamViewer. The provider is TeamViewer Germany GmbH, Jahnstr. 30, 73037 Göppingen, Germany. For details on data processing, please refer to the TeamViewer Privacy Policy: https://www.teamviewer.com/en/privacy-policy/..


GoToMeeting

We use GoToMeeting. The provider is LogMeIn, Inc., 320 Summer Street Boston, MA 02210, USA. For details on data processing, please refer to the GoToMeeting Privacy Policy: https://www.goto.com/company/legal/privacy.

Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://logmeincdn.azureedge.net/legal/lmi-customer-dpa-2020v1-de.pdf.


Conclusion of an order processing contract

We have concluded a contract data processing agreement with GoToMeeting and implement the stringent provisions of the German data protection agencies to the fullest when using GoToMeeting.


8. Own Services

Processing of applicant data

We offer you different options to apply to us (e.g., by e-mail, by post or via the online application form). The following information describes which personal data is collected, for what purpose and how it is used within the scope of the application process. We assure you that the collection, processing and use of your data occurs in accordance with the applicable data protection laws and all other statutory provisions, and that your data will be treated with the strictest confidentiality.


Scope and purpose of data collection

If you submit a job application to us, we will process any affiliated personal data (e.g., contact and communications data, application documents, notes taken during job interviews, etc.) that is required to make a decision concerning the establishment or an employment relationship. The legal grounds for the aforementioned are Section 26 German Federal Data Protection Act (FDPA) [Bundesdatenschutzgesetz (BDSG)] (Negotiation of an Employment Relationship), Art. 6(1)(b) GDPR (General Contract Negotiations) and, provided you have given your consent, Art. 6(1)(a) GDPR. This consent may be revoked at any time. Within our company, your personal data will only be shared with individuals who are involved in the processing of your job application

If your job application should result in your recruitment, the data you have submitted will be archived on the basis of Section 26 German Federal Data Protection Act (FDPA) and Art. 6(1)(b) GDPR for the purpose of implementing the employment relationship in our data processing system.


Data archiving period

If we are unable to make you a job offer or you reject a job offer or withdraw your application, we reserve the right to retain the data you have submitted on the basis of our legitimate interests (Art. 6(1)(f) GDPR) for up to six months from the end of the application procedure (rejection or withdrawal of the application). After this time the data will be deleted, and the physical application documents will be destroyed. The storage serves, in particular, as evidence in the event of a legal dispute. If it is evident that the data will be required after the expiry of the six-month period (e.g., due to an impending or pending legal dispute), deletion will only take place when the purpose for continued storage no longer applies.

Longer storage may also take place if you have given your consent (Art. 6(1)(a) GDPR) or if statutory data retention requirements preclude the deletion.