We are delighted of your interest in our company as well as our products and services and want you to feel safe in regards to the protection of your personal data when visiting our website. We do take the protection of your personal data serious. The adherence to the regulation of the General Data Protection Regulation (GDPR) is implicit for us.
We want you to know when we collect data and which data we collect and use. For this purpose, we have compiled below our general privacy information as well as privacy information for Website Visitors, for Customers / Other Contractual Partners and Interested Parties, for Applicants and for Image and Film Recording.
In addition to that, we want to let you know that we did put technical and organizational measures into place which ensure that the regulations for data protection are adhered to by us as well as subcontracted external service providers.
Elba Technologies GmbH
Industriestraße 23,
70565 Stuttgart
Represented by CEO: Hatice Kqiku
+49 174 3500313
mail@elba-tech.com
www.elba-tech.com
dpo@elba-tech.com
Every data subject has the right to information under Art. 15 GDPR, the right to rectification under Art. 16 GDPR, the right to erasure under Art. 17 GDPR, the right to restriction of processing under Art. 18 GDPR, the right to notification under Art. 19 GDPR and the right to data portability under Art. 20 GDPR.
In addition, you have the right to lodge a complaint with a data protection supervisory authority pursuant to Art. 77 GDPR if you are of the opinion that the processing of your personal data is not lawful. The right of appeal is without prejudice to any other administrative or judicial remedy.
If the processing of data is based on your consent, you are entitled to revoke your consent to the use of your personal data at any time in accordance with Art. 7 GDPR. Please note that the revocation is only effective for the future. Processing that took place before the revocation is not affected. Please also note that we may need to retain certain data for a certain period of time in order to comply with legal requirements (see section 8 of this data protection information).
Right to object:
Insofar as the processing of your personal data is carried out for the protection of legitimate interests pursuant to Art. 6 (1) lit. f GDPR, you have the right pursuant to Art. 21 GDPR to object to the processing of this data at any time for reasons arising from your particular situation. We will then no longer process this personal data unless we can demonstrate compelling legitimate grounds for the processing. These must override your interests, rights and freedoms, or the processing must serve the assertion, exercise or defense of legal claims.
In individual cases, we process your personal data in order to conduct direct advertising. You have the right to object to processing for the purpose of such advertising at any time. This also applies to profiling, insofar as it is related to this direct advertising. If you object to processing for the purpose of direct advertising, we will no longer process your personal data for these purposes.
To protect your rights, you can contact us using the contact details provided in section 1.
We reserve the right to change our security and data protection measures, as far as it is necessary due to technological progress. In these cases, we will also adjust our Privacy Policy and publish here. Therefore, please take note of the latest version of our Privacy Policy.
Personal data is information regarding your identity. These are for example your name, address, telephone number or e-mail address. For the usage of our website, it is not necessary to reveal personal data. In some cases however, we need your name and address as well as further details in order to be able to deliver the requested services.
The same is valid for the shipping of requested information material and products or for responses to individual questions. Where this is necessary, we to indicate respectively. Beyond that, we only store and process data which you voluntarily reveal to us, and if applicable, data which we collect automatically during the visit of our website (see paragraph “Data which is automatically collected during the visit of our website”)
If you utilize services, we generally collect only such data that is necessary for the delivery of the service. In case we ask you for more data, this is voluntary information. Personal data is only processed for the fulfillment of the requested service and to realize legitimate business interests.
Personal data provided by you we will use in general only in order to respond to your request, process your order or provide you with access to specific information or offers. For customer relationship management purposes, it can also be necessary, that we or a subcontracted service provider use this personal data in order to inform you about product offers or to conduct online surveys, in order to live up to the requirements of our customers.
We do respect if you do not whish to provide your personal data to support our customer relationship, particularly for direct marketing or market research. We will neither sell your personal data to third parties nor marked it otherwise.
We will also not pass personal data to states outside of the EU or the EEA.
We will collect, process and use personal data provided by you only for the purpose imparted. We will not transmit your personal data to third parties without your explicit consent.
Collection of personal data as well as their transmission to entitled state institutions and authorities will only happen in accordance with pertinent laws or in case we are obligated by court order. Our employees and subcontracted third service providers are bound to compliance with the regulations of the General Data Protection Regulation (GDPR).
The following data is stored for organizational and technical reasons during the visit of our website: Names of the called websites, your used browser and operating system, date and time of the access, used search engine, name of downloaded files as well as your IP address.
We do process this data anonymously and only for statistical purposes, in order to continuously optimize our web presence and to increase the attractiveness of our web offers. This data is stored separate from other personal data on secured systems. Inference to individual persons cannot be drawn.
Please visit our cookie policy for more information.
In case of establishing contacts with our company (e.g. via contact form or e-mail), information of the user is stored for the purpose of responding the request as well as in case consecutive queries arise.
We use Google Analytics, a web analysis service of Google Inc. (“Google”). Google Analytics uses cookies. Information generated by the cookie about the usage of this website (including your IP address) is transmitted to and stored on servers of Google in the US. Google uses this information in order to analyse your usage of this website, to generate reports about website activities for the website operator and to deliver further services connected with website and internet usage. If applicable, google might transmit this data to third parties, in case it is regulatorily obligated or third parties process this data on behalf of Google. Google will not correlate your IP address with other data of Google. You can prohibit the installation of these cookies by a respective setting of your browser software. However, we point out that you might not be able to use all functionalities of this website in this case. By the usage of this website, you consent to the processing of the collected data by Google in the described modality and for the described purpose. You can reject this collection and storing of data at any time at tools.google.com/dlpage/gaoptout. In the face of discussions around the usage of analysis tools with complete IP addresses, we want to point out that this website uses Google Analytics with the add on “anonymizeIP()” and therefore processes IP addresses only in shortened form in order to eliminate direct personal references.
We did put technical and organizational measures into place in order to protect your personal data from loss, destruction, manipulation and unauthorized access.
All our employees and all persons involved in the data processing are obligated to the compliance with the General Data Protection Regulation (GDPR) and other relevant laws as well as the confidential handling of personal data.
Our security measures are continuously revised according to technological progress.
In case we use external links, which are offered in the context of our website, this Privacy Policy is not valid for these links. In case we offer links, we ensure that at the time of linking, no infringements of effective laws have been recognizable on the linked webpage. However, we do not have influence on the adherence to data protection and security regulations of other providers. Therefore, please inform yourself on webpages of third party providers about their privacy policies.
(Data protection information on our processing of customer and prospective customer data in accordance with Articles 13, 14 and 21 of the General Data Protection Regulation (GDPR)).
Dear customer, dear interested party, dear contractual partner,
In accordance with the provisions of Articles 13, 14 and 21 of the General Data Protection Regulation (GDPR), we hereby inform you about the processing of your personal data and your rights under data protection law in this regard. Which data is processed in detail and how it is used depends largely on the requested or agreed services. To ensure that you are fully informed about the processing of your personal data in the context of the performance of a contract or the implementation of pre-contractual measures, please take note of the following information.
We process your personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG), insofar as this is necessary for the establishment, implementation or performance of a contract or for the implementation of pre-contractual measures. Insofar as personal data is required for the initiation or implementation of a contractual relationship or in the context of the implementation of pre-contractual measures, processing is lawful pursuant to Art. 6 (1) lit. b GDPR.
If you give us your express consent to process personal data for specific purposes (e.g., transfer to third parties, evaluation for marketing purposes, or advertising by e-mail), the lawfulness of this processing is based on your consent pursuant to Art. 6 (1) a GDPR. Consent given can be revoked at any time with effect for the future (see section 9 of this data protection information).
If necessary and legally permissible, we process your data beyond the actual contractual purposes for the fulfillment of legal obligations pursuant to Art. 6 para. 1 lit. c GDPR. In addition, processing may be carried out to protect the legitimate interests of us or third parties and to defend and assert legal claims pursuant to Art. 6 para. 1 lit. f GDPR. If necessary, we will inform you separately, stating the legitimate interest, insofar as this is required by law.
We only process data that is related to the establishment of a contract or pre-contractual measures. This may be general data about you or persons in your company (name, address, contact details, etc.) as well as any other data that you provide to us in the context of establishing a contract.
We process personal data that we receive from you in the course of contacting you by e-mail or telephone or in the course of establishing, implementing or fulfilling a contractual relationship or in the course of pre-contractual measures or that you provide via our online forms, in contractual documents or customer service software used by us.
We only pass on your personal data within our company to those areas and persons who need this data to fulfill contractual and legal obligations or to implement our legitimate interests.
We may transfer your personal data to companies affiliated with us, insofar as this is permissible within the framework of the purposes and legal bases set out in section 3 of this data protection information sheet. This may also take place within the framework of joint responsibility pursuant to Art. 26 GDPR.
Your personal data is processed on our behalf on the basis of order processing contracts pursuant to Art. 28 GDPR. In these cases, we ensure that the processing of personal data is carried out in accordance with the provisions of the GDPR. The categories of recipients in this case are internet service providers and providers of customer management and customer service systems and software.
Otherwise, data is only forwarded to recipients outside the company if this is permitted or required by law, if the forwarding is necessary for processing and thus fulfilling the contract or, at your request, for carrying out pre-contractual measures, if we have your consent or if we are authorized to provide information. Under these conditions, recipients of personal data may be, for example:
A transfer of personal data to countries outside the EEA (European Economic Area) or to an international organization will only take place if
Recipients in these cases may include, but are not limited to:
In these cases, a transfer is made in consideration of Art. 46 GDPR or Art. 49 para. 1 subpara. 2 GDPR.
As far as necessary, we process and store your personal data for the duration of our business relationship or for the fulfillment of contractual purposes. This includes, among other things, the initiation and execution of a contract.
In addition, we are subject to various storage and documentation obligations arising from the German Commercial Code (HGB) and the German Fiscal Code (AO), among other things. The retention and documentation periods prescribed there are two to ten years.
Finally, the storage period is also governed by the statutory limitation periods, which, for example, according to Sections 195 et seq. of the German Civil Code (BGB), are generally three years, but in certain cases can be up to thirty years.
The provision of personal data for the decision on the conclusion of a contract, the performance of a contract or for the implementation of pre-contractual measures is voluntary. However, we can only make a decision in the context of contractual measures if you provide such personal data that is required for the conclusion of the contract, the performance of the contract or pre-contractual measures.
For the establishment, fulfillment or implementation of the business relationship as well as for pre-contractual measures, we generally do not use fully automated decision-making pursuant to Art. 22 GDPR. Should we use these procedures in individual cases, we will inform you separately or obtain your consent, if this is required by law.
(Information on data protection regarding our processing of applicant data in accordance with Art. 13, 14 and 21 of the General Data Protection Regulation (GDPR)).
Dear Applicant,
Thank you for your interest in our company. In accordance with the requirements of Articles 13, 14 and 21 of the General Data Protection Regulation (GDPR), we hereby inform you about the processing of personal data provided by you as part of the application process and, if applicable, collected by us, and your rights in this regard. To ensure that you are fully informed about the processing of your personal data as part of the application process, please take note of the following information.
We process your personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG), insofar as this is necessary for the decision on the establishment of an employment relationship with us. The legal basis for this is Art. 88 GDPR in conjunction with Section 26 BDSG for purposes of the employment relationship if this is necessary for the decision on the establishment of an employment relationship.
Furthermore, we may process your personal data if this is necessary for the fulfillment of legal obligations (Art. 6 para. 1 lit. c GDPR) or for the defense or assertion of legal claims. The legal basis for this is Art. 6 Para. 1 lit. f GDPR. The legitimate interest is, for example, a duty to provide evidence in proceedings under the General Equal Treatment Act (AGG).
If you give us express consent to process personal data for specific purposes, the lawfulness of this processing is based on your consent pursuant to Art. 6 (1) lit. a GDPR. Consent given can be revoked at any time with effect for the future (see section 9 of this data protection information).
If an employment relationship arises between you and us, we may, in accordance with Art. 88 GDPR in conjunction with § 26 BDSG, further process the personal data already received from you for the purposes of the employment relationship, insofar as this is necessary for the implementation or termination of the employment relationship or for the exercise or fulfillment of the rights and obligations of the employee representation resulting from a law or a collective agreement, a company or service agreement (collective agreement).
We only process data that is related to your application. This includes, in particular, general personal data (name, address, contact details, etc. ), information on your professional qualifications and school education, information on professional training and, if applicable, other data that you provide to us in connection with your application.
We process personal data that we receive from you by post or e-mail in the course of contacting you or your application, or that you send us via an online application portal that we use.
We only pass on your personal data within our company to those areas and persons who need this data to fulfill contractual and legal obligations or to implement our legitimate interests.
We may transfer your personal data to companies affiliated with us, insofar as this is permissible within the framework of the purposes and legal bases set out in section 3 of this data protection information sheet. This may also take place within the framework of joint responsibility pursuant to Art. 26 GDPR.
Your personal data is processed on our behalf on the basis of order processing contracts pursuant to Art. 28 GDPR. In these cases, we ensure that the processing of personal data is carried out in accordance with the provisions of the GDPR. The categories of recipients in this case are Internet service providers and providers of applicant management systems and software.
Otherwise, data is only passed on to recipients outside the company if this is permitted or required by law, if the transfer is necessary to fulfill legal obligations or if we have your consent.
Personal data will only be transferred to countries outside the EEA (European Economic Area) or to an international organization if this is necessary for the purposes set out in section 3 of this data protection information sheet, if the transfer is required by law or if you have given us your consent. In these cases, recipients may include, among others, Internet service providers and providers of applicant management systems and software as well as affiliated companies. In these cases, a transfer takes place in consideration of Art. 46 GDPR or Art. 49 (1) subparagraph 2 GDPR.
We store your personal data as long as this is necessary for the decision on your application. Your personal data or application documents will be deleted no later than six months after the end of the application process (e.g. notification of the rejection decision), unless longer storage is required or permitted by law. We store your personal data beyond this only to the extent that this is required by law or in the specific case for the assertion, exercise or defense of legal claims for the duration of a legal dispute.
In the event that you have consented to a longer storage of your personal data, we will store it in accordance with your declaration of consent.
If an employment, training or internship relationship is established following the application process, your data will initially continue to be stored to the extent necessary and permissible and then transferred to the personnel file.
If the application process does not result in an employment, training or internship relationship, we may add you to our talent pool. This allows us to continue to consider you in our selection of applicants for suitable vacancies in the future. If we have your consent to do so, we will store your application data in our talent pool in accordance with your consent or any future consent.
The provision of your personal data as part of the application process is voluntary. However, we can only make a decision on the establishment of an employment relationship or establish an employment relationship with you if you provide such personal data that is required for the execution of the application.
The decision about your application is not based exclusively on automated processing. Thus, no automated decision in individual cases within the meaning of Art. 22 GDPR takes place.
(Information on data protection about our processing of visitor data in accordance with Art. 13, 14 and 21 of the General Data Protection Regulation (GDPR)).
Dear visitor,
In accordance with the provisions of Articles 13, 14 and 21 of the General Data Protection Regulation (GDPR), we hereby inform you about the processing of your personal data and your rights under data protection law in this regard. Which data is processed in detail and how it is used depends largely on the reason for your visit. To ensure that you are fully informed about the processing of your personal data in the context of the handling of your visit, please take note of the following information.
We process your personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG), insofar as this is necessary to document your visit.
with the purpose of operational security, physical access control (ensuring that only authorized persons are granted access to buildings or building areas or rooms) and, in addition, at our Pristina site, attendance documentation (documentation of the presence (access time, access point, duration of presence) of authorized persons in buildings or building areas or rooms). The legal basis for this is a legitimate interest in accordance with Art. 6 Para. 1 lit. f GDPR. A legitimate interest can only be assumed as a legal basis if the interests of the controller in the processing outweigh the interests of the data subjects. For this reason, we have performed and documented a balancing of interests, which is in favor of the controller. The company has the following interests in data processing:
with the purpose of burglary protection and the prevention of access by unauthorized persons. The legal basis for this is a legitimate interest according to Art. 6 (1) lit. f GDPR. A legitimate interest can only be assumed as a legal basis if the interests of the controller in the processing outweigh the interests of the data subjects. For this reason, we have performed and documented a balancing of interests, which is in favor of the controller. The company has the following interests in data processing:
If you give us express consent to process personal data for specific purposes, the lawfulness of this processing is based on your consent pursuant to Art. 6 (1) lit. a GDPR. Consent given can be revoked at any time with effect for the future (see section 9 of this data protection information).
Your personal data is processed to protect our legitimate interests and to defend and assert legal claims pursuant to Art. 6 (1) lit. f GDPR. We have an interest in knowing which persons are in our company, when and for what reason, in order to ensure security in our company and to be able to prosecute any criminal offences.
We only process data that is related to your visit. This may be general data about you or persons in your company (name, address, contact details, etc.) as well as any other data that you provide to us during the visit.
We only process data that is related to access control and attendance documentation. In addition to the identifier required for access control, this can also include:
Biometric data is not processed.
We only process data that is related to burglary protection and the prevention of access by unauthorized persons. This can be video transmission (without recording) as well as video recordings.
We process personal data that you provide during your visit or that you transmit to us via e-mail or telephone.
We process personal data generated by you when using the access control system.
We process personal data collected from you when you use our premises. Recording and transmission only takes place in the outdoor area, around the clock.
We only pass on your personal data within our company to those areas and persons who need this data to document your visit or to implement our legitimate interest.
We may transfer your personal data to companies affiliated with us, insofar as this is permissible within the framework of the purposes and legal bases set out in section 3 of this data protection information sheet. This may also take place within the framework of joint responsibility pursuant to Art. 26 GDPR.
Your personal data is processed on our behalf on the basis of order processing contracts pursuant to Art. 28 GDPR. In these cases, we ensure that the processing of personal data is carried out in accordance with the provisions of the GDPR. The categories of recipients in this case are internet service providers as well as providers of office services and access control systems and software.
Otherwise, data is only passed on to recipients outside the company if this is permitted or required by law, if the transfer is necessary to process your visit, if we have your consent or if we are authorized to provide information. Under these conditions, recipients of personal data may be, for example:
Personal data will only be transferred to countries outside the EEA (European Economic Area) or to an international organization if this is necessary for the purposes set out in section 3 of this data protection information sheet, if the transfer is required by law or if you have given us your consent. In these cases, the recipients may include Internet service providers. A transfer in these cases will take place in consideration of Art. 46 GDPR or Art. 49 (1) subparagraph 2 GDPR.
Your data will be deleted as soon as it is no longer required for the above-mentioned purpose, but at the latest after 48 hours. Deletion takes place in particular when we have been able to carry out any necessary investigations for the prosecution of criminal offenses.
We process your personal data on an occasion-related basis (e.g. to clarify specific incidents, to preserve evidence, to assert legal claims) until the conclusion of a preservation of evidence / assertion, exercise or defense of legal claims, otherwise:
We process your personal data on an ad hoc basis (e.g. to clarify specific incidents, to preserve evidence, to assert legal claims) until the conclusion of a preservation of evidence / assertion, exercise or defense of legal claims, otherwise for a maximum of 20 days.
In addition, we are subject to various storage and documentation obligations arising from the German Commercial Code (HGB) and the German Fiscal Code (AO), among other things. The retention and documentation periods prescribed there are two to ten years.
Finally, the storage period is also governed by the statutory limitation periods, which, for example, according to Sections 195 et seq. of the German Civil Code (BGB), are generally three years, but in certain cases can be up to thirty years.
The provision of personal data for the processing of your visit is voluntary. However, we can only process your visit if you provide such personal data that is necessary for documenting the visit and ensuring security in our company.
For the documentation of your visit, we generally do not use fully automated decision-making pursuant to Art. 22 GDPR. Should we use these procedures in individual cases, we will inform you about this separately or obtain your consent, if this is required by law.
(Privacy information about our processing of your data in accordance with Articles 13 and 21 of the General Data Protection Regulation (GDPR))
Dear Visitor,
In accordance with the requirements of Articles 13 and 21 of the General Data Protection Regulation (GDPR), we hereby inform you about the processing of your personal data and your rights under data protection law in this regard. In order to ensure that you are fully informed about the processing of your personal data in the context of this event, please take note of the following information. Processing will take place in the form of the taking of a picture and/or film as well as the publication of the picture and/or film.
We process your personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).
Insofar as the recording and/or publication of an image and/or film for the purpose to be determined in each case has been agreed in a contract, the contracting parties of which are the responsible party named in item 1 and you as the data subject, the lawfulness of this processing is given in accordance with Art. 6 para. 1 lit. b GDPR.
If you give us express consent for the purpose to be determined in each case, the lawfulness of this processing is given on the basis of your consent pursuant to Art. 6 (1) lit. a GDPR. Consent given can be revoked at any time with effect for the future (see section 9 of this data protection information).
Furthermore, the taking and/or publication of a picture and/or film for the purpose of documentation and public relations is based on our legitimate interest pursuant to Art. 6 (1) lit. f GDPR, insofar as the taking and publication of photo and/or video recordings can be assumed on the basis of your reasonable expectation. Our legitimate interest here is that the publication of selected image/video files in (print) publications and on our website/social media profiles or similar is necessary for our public relations work. This applies to larger events with an unmanageably large number of participants, provided that the data subject is only an “accessory” and there is no
secret, covert recordings, recordings from the private sphere, discriminatory photos or those that give an inference to data according to Article 9 (1) of the GDPR, e.g. religion, health, sex life. Also excluded are recordings of children.
The personal data processed by us here are image and/or film recordings.
In the case of processing based on a contract or explicit consent, other personal data (e.g. first name, last name, professional position) may be added, as specified in the respective contract or consent.
We process personal data in the form of images and/or films which have been taken by you during events or, in the case of processing based on a contract or explicit consent, in each case on an occasion-related basis.
We only share your personal data within our company with those areas and persons who need this data to implement our legitimate interests.
We may transfer your personal data to companies affiliated with us, insofar as this is permissible within the framework of the purposes and legal bases set out in section 3 of this data protection information sheet. This may also take place within the framework of joint responsibility pursuant to Art. 26 GDPR.
The data will be transmitted upon publication on our
A transfer of personal data to countries outside the EEA (European Economic Area) or to an international organization will only take place if this is necessary for the purpose of documentation and public relations, or in the case of processing on the basis of a contract or explicit consent for the respective specified purpose, if the transfer is required by law or if you have given us your consent. Recipients in these cases may include, among others, affiliated companies and processors. In these cases, a transfer is made in consideration of Art. 46 GDPR or Art. 49 (1) subparagraph 2 GDPR.
It cannot be ruled out that data published on the Internet may also reach third countries.
As far as necessary, we process and store your personal data for the duration of our legitimate interest. The data will be deleted when they are no longer required for the above-mentioned purposes, or you have exercised your right to object. If the recording and/or publication of images and/or films is based on your consent, we will delete the images and/or films concerned immediately upon receipt of your revocation, unless further processing can be based on a legal basis for processing without consent.
Please note that information placed on the Internet, including image and film recordings, can be easily copied and further processed. There are specialized archiving services whose aim is to permanently document the state of certain websites on specific dates. This can mean that information published on the Internet can still be found elsewhere even after it has been deleted from the website on which it was originally published.
You are free to decide whether or not to permit the taking and/or publication of pictures and/or films. In the absence of conflicting interests on your part, public relations work in the case of events is only possible for us if we are allowed to take these pictures and/or films. If you participate in an event and do not declare any conflicting interest to us, we assume that you agree to the recording of photographs as well as videos. If you have given us your consent to the recording and/or publication of images and/or films, we will use them in accordance with the purpose stated above. If there is no consent on your part, we will take this into account accordingly in the recording and / or publication.
For the recording and/or publication of images and/or films, we generally do not use fully automated decision-making pursuant to Art. 22 GDPR. Should we use these procedures in individual cases, we will inform you separately about this or obtain your consent, if this is required by law.