Data
protection information
Elba Technologies GmbH
Elba Technology SH.P.K.
Elba Technologies Bulgaria EOOD
With this data protection information, we
inform you about the processing of personal data in our company. This includes
the collection and processing:
– On our
website www.elba-tech.com
– On our social
media channels Facebook, Instagram and LinkedIn, as well as on external
services that we use
– In the
context of other processing activities
Processing is
carried out on the basis of the General Data Protection Regulation (GDPR) and
other relevant laws.
Data
protection information for website visitors, für customers / other contractual
partners and interested parties, für applicants, for visitors
and for image and film recordings.
General information
Responsible
body for data processing
Elba
Technologies GmbH
Industriestrasse 23
70565 Stuttgart
Represented by: Hatice Kqiku (CEO)
+49 174 3500313
mail@elba-tech.com www.elba-tech.com
Contact
information of our data protection officer
dpo@elba-tech.com
Security of
the processing of personal data
We have taken
technical and organizational measures to protect your personal data from loss,
destruction, manipulation and unauthorized access.
All our
employees and all persons involved in data processing are obliged to comply
with the General Data Protection Regulation (GDPR) and other relevant laws and
to handle personal data confidentially.
Our security
measures are continuously revised in line with technological progress.
Data protection information for
website visitors
Personal
data
Personal data
is information about your identity. This includes, for example, your name, your
address, your telephone number or your e-mail address. It is not necessary for
you to disclose personal data in order to use our website. In some cases,
however, we need your name and address as well as other details in order to be
able to provide the requested services.
The same
applies to the sending of requested information material and products or for
answering individual questions. Where this is necessary, we will indicate this
accordingly. In addition, we only store and process data that you provide to us
voluntarily and, where applicable, data that we collect automatically when you
visit our website.
Data that
is automatically collected during your visit to our website
SSL or TLS
encryption
This site uses
SSL or TLS encryption for security reasons and to protect the transmission of
confidential content. You can recognize an encrypted connection by the fact
that the address line of the browser begins with “https://”.
If SSL or TLS
encryption is activated, the data you transmit to us cannot be read by third
parties.
Server log
files
When you visit
our website, the following data is stored for organizational and technical
reasons: Names of the web pages accessed, the browser and operating system you use,
the date and time of access, the search engine used, the name of the files
accessed and your IP address.
Cookies
This website
sometimes uses so-called cookies to enable the use of certain functions.
Cookies are information storage devices that are stored on your end device and
may be exchanged with other providers. Cookies are used to make our website
more user-friendly. Most of the cookies we use are so-called “session
cookies”. They are automatically deleted at the end of your visit. Other
cookies remain stored on your end device until you delete them. These cookies
make it possible to recognize your browser the next time you visit our website.
You can set
your browser so that you are informed about the setting of cookies and only
allow cookies in individual cases, exclude the acceptance of cookies for
certain cases or in general and activate the automatic deletion of cookies when
closing the browser. If cookies are deactivated, the functionality of this
website may be restricted.
Cookie
consent with GPDR Cookie Consent Plugin technology
Our website
uses the cookie consent technology of Mozilor Limited to obtain your
consent to the storage of certain cookies in your browser and to document this
in compliance with data protection regulations. The provider of
this technology is Mozilor Limited, 3 Warren Yard, Wolverton Mill Milton
Keynes, England, UK – MK12 5NW.
When you enter
our website, a GPDR Cookie Consent Plugin cookie is stored in
which the consents you have given or the revocation of these consents are
stored. This data is stored locally and is not passed on to the
provider of the consent management plugin.
The data
collected will be stored until you ask us to delete it or until the purpose for
storing the data no longer applies. Mandatory statutory retention periods
remain unaffected.
The GPDR Cookie Consent Plugin technology is used to obtain the legally
required consent for the use of cookies. The legal basis for this is Art. 6
para. 1 lit. c GDPR.
Contact
Elba Technologies GmbH
When
contacting our company (e.g. via contact form or e-mail), the user’s details
are stored for the purpose of processing the inquiry and in the event that
follow-up questions arise.
Purpose and
legal basis of the processing
The collection of data when visiting our website is based on Art. 6 para. 1
lit. f) GDPR. We have a legitimate interest in the technically error-free
presentation and optimization of our website.
The processing of the data that we receive from you when you contact us by
e-mail, telephone or via the contact form on our website is based on Art. 6
para. 1 lit. b) GDPR, provided that your request is related to the performance
of a contract or is necessary for the implementation of pre-contractual
measures. In all other cases, the processing is based on your consent (Art. 6
para. 1 lit. a) GDPR) and/or on our legitimate interest (Art. 6 para. 1 lit. f)
GDPR) in the effective processing of the inquiries addressed to us.
We generally
use the personal data provided by you to answer your inquiries, process your
orders or provide you with access to certain information or offers. In order to
maintain customer relations, it may also be necessary for us or a service
company commissioned by us to use this personal data to inform you about
product offers or to survey you as part of online surveys in order to fulfill
the tasks and requirements of our customers.
Personal data
is only collected and transmitted to state institutions and authorities
entitled to receive information within the framework of mandatory legal
provisions or if we are obliged to do so by a court decision. Our employees and
the service companies commissioned by us are obliged to comply with the
provisions of the General Data Protection Regulation (GDPR).
External
services
Google
Analytics and Google reCAPTCHA
We use Google
Analytics, a web analytics service provided by Google Inc (“Google”).
Google Analytics uses cookies. The information generated by the cookies about
your use of the website (including your IP address) will be transmitted to and
stored by Google on servers in the United States. Google will use this
information for the purpose of evaluating your use of the website, compiling
reports on website activity for website operators and providing other services
relating to website activity and internet usage. Google may also transfer this
information to third parties where required to do so by law, or where such
third parties process the information on Google’s behalf. You can object to
this data collection and storage at any time at tools.google.com/dlpage/gaoptout. We would like to point out that this website uses Google Analytics with the extension “anonymizeIP()” and therefore
IP addresses are only processed in abbreviated form.
Google
reCAPTCHA is a captcha service operated by Google LLC. It attempts to
distinguish whether a certain action on the Internet is carried out by a human
or by a computer program or bot.
Purpose and
legal basis of the processing
We use Google Analytics on our
website in order to constantly improve our services.
We use Google reCAPTCHA to minimize the sending of spam requests.
The legal
basis for the processing of the data is Art. 6 para. 1 lit. a GDPR, provided
that you have given us your consent to data processing. We have a legitimate interest according to Art. 6 para. 1 lit.f to minimize the sending of spam
requests by using Google reCAPTCHA.
Recipients
of the personal data
The recipient
of the personal data relating to your visit to our website is Google.
Transfer to
a third country
When using Google
Analytics and Google reCAPTCHA, personal data is transferred to the United
States of America.
Data transfer
to the USA is based on the adequacy decision on the EU-US Data Privacy
Framework (for certified companies) or on the standard contractual clauses of
the EU Commission.
Calendly
We use the
Calendly software from Calendly, Inc, 115 E Main St., Ste. A1B, Bufort, GA
30518, United States of America to schedule consulting appointments with our
company’s employees. For this purpose, your contact details such as name, e-mail
address and, if applicable, your comments are processed.
Purpose and
legal basis of the processing
It is
necessary to process your personal data for the purpose of arranging consultation
appointments.
The legal
basis for the processing of the data is Art. 6 para. 1 lit. f GDPR. We have a
legitimate interest in informing you about our services as well as the
requirements for the fulfillment of an agreement or pre-contractual measures at
your request (Art. 6 para. 1 lit. b GDPR).
We have
concluded an order processing contract with the service provider Calendly in
accordance with Art. 28 GDPR.
Recipients
of the personal data
Data is
transferred to the processor Calendly, Inc, 115 E Main St., Ste. A1B, Bufort,
GA 30518, United States of America (https://www.calendly.com) represented by DPO Centre
Europe, Friedrichstraße 88, 10117 Berlin, Germany, eurep@calendly.com.
Data
protection information of the company Calendly:
Transfer to
a third country
Data transfer
to the USA is based on the adequacy decision on the EU-US Data Privacy
Framework (for certified companies) or on the standard contractual clauses of
the EU Commission.
Duration of
processing
The duration
of processing is variable and ends when the purpose of processing ceases to
apply.
Social
media presence
We are active
on social networks to inform you as a user about our services and vacancies.
The following
data protection information relates to our company presence on social media
platforms.
All social
media channels offered on the website can only be accessed by you as a visitor
to the website via an external link. We do not use any plugins or other
interfaces on our websites that the respective networks offer for embedding
their services on websites.
As soon as you
access our social media profile in the respective network, the terms and
conditions and data processing guidelines of the respective operators apply.
Instagram
and Facebook
These services
are provided by Meta Platforms Ireland Limited, Block J, Serpentine Avenue,
Dublin 4, Ireland.
Please note
that if you are logged in with your own profile on Facebook or Instagram and
access our social media channel, Meta Platforms Ireland Limited can assign your
visit to your logged-in profile.
We would like
to point out that we have no influence on the content and scope of use of the
data collected by Facebook. For further information in this regard, please
refer to the privacy policy of Meta Platforms Ireland Limited:
https://facebook.com/privacy/explanation .
Insofar as
personal data is collected on our website and forwarded to Meta, we and Meta
Platforms Ireland Limited, Block J, Serpentine Avenue, Dublin 4, Ireland are
jointly responsible for this data processing (Art. 26 GDPR). The joint
responsibility is limited exclusively to the collection of the data and its
transfer to Meta. The processing carried out by Meta after forwarding is not
part of the joint responsibility. The obligations incumbent on us jointly have
been set out in a joint processing agreement. The text of the agreement can be
found at: https://www.facebook.com/legal/controller_addendum.
You can assert
data subject rights (e.g. requests for information) regarding the data
processed by Facebook or Instagram directly with Meta Platforms Ireland
Limited. If you assert your data subject rights with us, your request will also
be forwarded to Meta Platforms Ireland Limited.
LinkedIn
The technical
platform and the offers are provided by LinkedIn, LinkedIn Ireland Unlimited
Company, Wilton Place, Dublin 2, Ireland ( https://www.linkedin.com).
We have no
influence on the content and scope of use of the data collected by LinkedIn.
For further information in this regard, please refer to LinkedIn’s privacy
policy:
https://de.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy
Purpose and legal basis of the
processing
It is
necessary to process your personal data for the purpose of using the social
media platform.
The legal
basis for the processing of the data is Art. 6 para. 1 lit. f GDPR. We have a
legitimate interest in providing information about our services and vacancies.
Recipients
of the personal data
The recipient
of the personal data of the comment or direct message is the respective social
media platform.
Transfer to
a third country
When using
Facebook, Instagram and LinkedIn, personal data is transferred to the United
States of America.
Data transfer
to the USA is based on the adequacy decision on the EU-US Data Privacy
Framework (for certified companies) or on the standard contractual clauses of
the EU Commission.
Data protection information for customers
/ other contractual partners and interested parties
Data
protection information about our processing of customer and prospective
customer data in accordance with Articles 13, 14 and 21 GDPR.
Dear customer,
dear prospective customer, dear contractual partner,
In accordance
with the provisions of Articles 13, 14 and 21 GDPR, we hereby inform you about
the processing of your personal data and your rights under data protection law
in this regard. Which data is processed in detail and how it is used depends
largely on the requested or agreed services. To ensure that you are fully
informed about the processing of your personal data in the context of the
fulfillment of a contract or the implementation of pre-contractual measures,
please take note of the following information.
Purpose and legal basis of the
processing
We process
your personal data in accordance with the provisions of the European General
Data Protection Regulation (GDPR) and the German Federal Data Protection Act
(BDSG), insofar as this is necessary for the establishment, execution or
performance of a contract or for the implementation of pre-contractual
measures. Insofar as personal data is required for the initiation or execution
of a contractual relationship or in the context of the implementation of
pre-contractual measures, the processing is lawful pursuant to Art. 6 para. 1
lit. b GDPR.
If you give us
your express consent to process personal data for specific purposes (e.g.
transmission to third parties, evaluation for marketing purposes or advertising
by e-mail), the lawfulness of this processing is based on your consent in
accordance with Art. 6 para. 1 lit. a GDPR. Any consent given can be revoked at
any time with effect for the future (see section 9 of this data protection
notice).
If necessary
and legally permissible, we process your data beyond the actual contractual
purposes to fulfill legal obligations in accordance with Art. 6 para. 1 lit. c GDPR.
In addition, processing may be carried out to protect the legitimate interests
of us or third parties and to defend and enforce legal claims in accordance
with Art. 6 para. 1 lit. f GDPR. If necessary, we will inform you separately,
stating the legitimate interest, insofar as this is required by law.
Categories of personal data
We only
process data in connection with the conclusion of a contract or pre-contractual
measures. This may be general data about you or persons in your company (name,
address, contact details, etc.) as well as other data that you provide to us in
the context of initiating a contract.
Sources of the data
We process
personal data that we receive from you when you contact us by e-mail or
telephone or in the context of establishing, implementing or fulfilling a
contractual relationship or in the context of pre-contractual measures or that
you provide to us via our online forms, in contract documents or in the
customer service software we use.
Recipient of the data
We only pass
on your personal data within our company to those departments and persons who
require this data to fulfill contractual and legal obligations or to safeguard
our legitimate interests.
We may
transfer your personal data to companies affiliated with us insofar as this is
permitted within the scope of the purposes and legal bases specified in this
data protection information. This may also take place within the
framework of joint responsibility in accordance with Art. 26 GDPR.
The processing
of your personal data is carried out on our behalf on the basis of order
processing contracts in accordance with Art. 28 GDPR. In these cases, we ensure
that the processing of personal data is carried out in accordance with the
provisions of the GDPR. Categories of recipients in this case are internet
service providers and providers of customer management and customer service systems
and software.
Otherwise,
data will only be transmitted to recipients outside the company if this is
permitted or required by law, if the transmission is necessary for contract
processing and thus for contract fulfillment or, at your request, for the
implementation of pre-contractual measures, if we have your consent or if we
are entitled to provide information. Under these conditions, recipients of
personal data may be, for example
Transfer to a third country
Personal data
will only be transferred to countries outside the EEA (European Economic Area)
or to an international organization if
The recipients
in these cases include, among others
In these
cases, data is transferred in accordance with Art. 46 GDPR or
Art. 49 GDPR.
Duration of data storage
Where
necessary, we process and store your personal data for the duration of our
business relationship or to fulfill contractual purposes. This includes, among
other things, the initiation and execution of a contract.
In addition,
we are subject to various retention and documentation obligations arising from
the German Commercial Code (HGB) and the German Fiscal Code (AO), among others.
The retention and documentation periods prescribed there are two to ten years.
Finally, the
retention period is also based on the statutory limitation periods, which, for
example, according to Sections 195 et seq. of the German Civil Code (BGB), are
generally three years, but in certain cases can be up to thirty years.
Necessity of providing personal
data
The provision
of personal data for the decision on the conclusion of a contract, the
performance of a contract or for the implementation of pre-contractual measures
is voluntary. However, we can only make a decision within the framework of
contractual measures if you provide us with personal data that is necessary for
the conclusion of the contract, the fulfillment of the contract or
pre-contractual measures.
Automated decision making
For the
initiation, fulfillment or execution of the business relationship as well as
for pre-contractual measures, we generally do not use fully automated
decision-making in accordance with Art. 22 GDPR. If we use these procedures in
individual cases, we will inform you separately or obtain your consent if this
is required by law.
Information on data protection for applicants
Information on
data protection when processing applicant data in accordance with Art. 13, 14
and 21 GDPR.
Dear applicant,
Thank you for
your interest in our company. In accordance with the requirements of Articles
13, 14 and 21 GDPR, we hereby inform you about the processing of the personal
data provided by you as part of the application process and, if applicable,
collected by us, as well as about your rights in this regard. To ensure that
you are fully informed about the processing of your personal data as part of
the application process, please take note of the following information.
Purpose and legal basis of the
processing
We process
your personal data in accordance with the provisions of the European General
Data Protection Regulation (GDPR) and the German Federal Data Protection Act
(BDSG), insofar as this is necessary for the decision on the establishment of
an employment relationship with us. The legal basis for this is Art. 88 GDPR in
conjunction with Section 26 BDSG for the purposes of the employment
relationship, insofar as this is necessary for the decision on the
establishment of an employment relationship.
In addition,
we may process your personal data if this is necessary to fulfill legal
obligations (Art. 6 para. 1 lit. c GDPR) or to defend or assert legal claims.
The legal basis for this is Art. 6 para. 1 lit. f GDPR. The legitimate interest
is, for example, a burden of proof in proceedings under the General Equal
Treatment Act (AGG).
If you give us
your express consent to process personal data for specific purposes, the
lawfulness of this processing is based on your consent in accordance with Art.
6 para. 1 lit. a GDPR. Any consent given can be revoked at any time with effect
for the future.
If an
employment relationship arises between you and us, we may, in accordance with
Art. 88 GDPR in conjunction with Section 26 BDSG, further process the personal
data already received from you for the purposes of the employment relationship,
insofar as this is necessary for the performance or termination of the
employment relationship or for the exercise or fulfillment of the rights and
obligations of the employee representation arising from a law or a collective
agreement, a works or service agreement (collective agreement).
Categories of personal data
We only
process data in connection with your application. In particular, this includes
general personal data (name, address, contact details, etc.), information about
your professional qualifications and school education, information about
vocational training and any other data that you provide to us in connection
with your application.
Sources of the data
We process
personal data that we receive from you in the course of contacting you or your
application by post or e-mail.
Recipient of the data
We only pass
on your personal data within our company to those departments and persons who
require this data to fulfill contractual and legal obligations or to safeguard
our legitimate interests.
We may
transfer your personal data to companies affiliated with us insofar as this is
permitted within the scope of the purposes and legal bases specified in this
data protection information. This may also take place within the framework of
joint responsibility in accordance with Art. 26 GDPR.
Otherwise,
data will only be passed on to recipients outside the company if this is
permitted or required by law, if the transfer is necessary to fulfill legal
obligations or if we have your consent.
Transfer to a third country
Personal data
will only be transferred to countries outside the EEA (European Economic Area)
or to an international organization if this is necessary for the purposes
stated in this data protection information, if the transfer is required by law
or if you have given us your consent. In these cases, the recipients may
include internet service providers and providers of applicant management
systems and software as well as affiliated companies. In these cases, data is
transferred in compliance with Art. 46 GDPR and Art. 49 GDPR.
Duration of data storage
We store your
personal data for as long as is necessary for the decision on your application.
Your personal data or application documents will be deleted no later than six
months after completion of the application process (e.g. notification of
rejection), unless longer storage is required or permitted by law. In addition,
we only store your personal data if this is required by law or is necessary in
individual cases for the assertion, exercise or defense of legal claims for the
duration of a legal dispute.
If you have
consented to your personal data being stored for a longer period, we will store
it in accordance with your declaration of consent.
If an
employment, training or internship relationship is established following the
application process, your data will initially be stored to the extent required
and permitted and then transferred to your personnel file.
If the
application process does not lead to an employment, training or internship
relationship, we can add you to our talent pool. This enables us to continue to
consider you when selecting applicants for suitable positions in the future. If
we have your consent to do so, we will store your application data in our
talent pool in accordance with your consent or a future consent.
Necessity of providing personal
data
The provision
of your personal data as part of the application process is voluntary. However,
we can only make a decision on the establishment of an employment relationship
or establish an employment relationship with you if you provide the personal
data that is necessary for the application process.
Automated decision making
The decision
on your application is not based exclusively on automated processing. There is
therefore no automated decision in individual cases within the meaning of Art.
22 GDPR.
Information on data protection for
visitors
Information on
data protection regarding our processing of visitor data in accordance with
Art. 13, 14 and 21 GDPR.
Lieber Besucher,
In accordance
with the provisions of Articles 13, 14 and 21 of the European General Data
Protection Regulation (GDPR), we hereby inform you about the processing of your
personal data and your rights under data protection law in this regard. Which
data is processed in detail and how it is used depends largely on the reason
for your visit. To ensure that you are fully informed about the processing of
your personal data in the course of your visit, please take note of the
following information.
Purpose and legal basis of the
processing
We process
your personal data in accordance with the provisions of the European General
Data Protection Regulation (GDPR) and the German Federal Data Protection Act
(BDSG), insofar as this is necessary to document your visit.
for the
purpose of operational security, physical access control (ensuring that only
authorized persons are granted access to buildings or building areas or rooms)
and, in addition, attendance documentation at our Pristina site (documentation
of the presence (access time, access location, duration of presence) of
authorized persons in buildings or building areas or rooms). The legal basis
for this is a legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR. A
legitimate interest can only be assumed as a legal basis if the interests of
the controller in the processing outweigh the interests of the data subjects.
For this reason, we have carried out and documented a balancing of interests,
which is in favor of the controller. The company has the following interests in
data processing:
for the
purposes of intrusion protection and preventing access by unauthorized persons.
The legal basis for this is a legitimate interest pursuant to Art. 6 (1) lit. f
GDPR. A legitimate interest can only be assumed as a legal basis if the
interests of the controller in the processing outweigh the interests of the
data subjects. For this reason, we have carried out and documented a balancing
of interests, which is in favor of the controller. The company has the
following interests in data processing:
If you give us
your express consent to process personal data for specific purposes, the
lawfulness of this processing is based on your consent in accordance with Art.
6 para. 1 lit. a GDPR. Any consent given can be revoked at any time with effect
for the future.
Your personal
data is processed to protect our legitimate interests and to defend and enforce
legal claims in accordance with Art. 6 para. 1 lit. f GDPR. We have an interest
in knowing which persons are in our company, when and for what reason, in order
to ensure security in our company and to be able to prosecute any criminal
offenses.
Categories of personal data
We only
process data that is related to your visit. This may be general data about you
or people in your company (name, address, contact details, etc.) as well as any
other data that you provide to us during your visit.
We only process
data in connection with access control and attendance documentation. In
addition to the identifier required for access control, this may also include
Biometric data
is not processed.
We only
process data in connection with burglary protection and the prevention of
access by unauthorized persons. This can be video transmissions (without
recording) as well as video recordings.
Sources of the data
We process
personal data that you provide to us during your visit or that you send us by
e-mail or telephone.
We process
personal data generated by you when you use the access control system.
We process
personal data that we receive from you when you use our premises. Recording and
transmission only takes place outside, around the clock.
Recipient of the data
We only pass
on your personal data within our company to those areas and persons who require
this data to document your visit or to safeguard our legitimate interests.
We may
transfer your personal data to companies affiliated with us insofar as this is
permitted within the scope of the purposes and legal bases specified in this
data protection notice. This may also take place within the framework of joint
responsibility in accordance with Art. 26 GDPR.
The processing
of your personal data is carried out on our behalf on the basis of order
processing contracts in accordance with Art. 28 GDPR. In these cases, we ensure
that the processing of personal data is carried out in accordance with the
provisions of the GDPR. The categories of recipients in this case are internet
service providers and providers of office services and access control systems
and software.
Otherwise,
data will only be passed on to recipients outside the company if this is
permitted or required by law, if the transfer is necessary to process your
visit, if we have your consent or if we are authorized to provide information.
Under these conditions, recipients of personal data may be, for example
Transfer to a third country
Personal data
will only be transferred to countries outside the EEA (European Economic Area)
or to an international organization if this is necessary for the purposes
stated in this data protection information, if the transfer is required by law
or if you have given us your consent. In these cases, the recipients may also
include Internet service providers. In these cases, the transfer takes place in
compliance with Art. 46 GDPR or Art. 49 GDPR.
Duration of data storage
Your data will
be deleted as soon as it is no longer required for the aforementioned purpose,
but at the latest after 48 hours. The deletion takes place in particular when
we have been able to carry out any necessary investigations for the prosecution
of criminal offenses.
We process
your personal data on a case-by-case basis (e.g. to clarify certain incidents,
to preserve evidence, to assert legal claims) until the conclusion of a
preservation of evidence / assertion, exercise or defense of legal claims,
otherwise:
We process
your personal data on an ad hoc basis (e.g. to clarify certain incidents, to
preserve evidence, to assert legal claims) until the conclusion of a
preservation of evidence / assertion, exercise or defense of legal claims,
otherwise for a maximum of 20 days.
In addition,
we are subject to various retention and documentation obligations arising from
the German Commercial Code (HGB) and the German Fiscal Code (AO), among others.
The retention and documentation periods prescribed there are two to ten years.
Finally, the
retention period is also based on the statutory limitation periods, which, for
example, according to Sections 195 et seq. of the German Civil Code (BGB), are
generally three years, but in certain cases can be up to thirty years.
Necessity of providing personal
data
The provision
of personal data for the processing of your visit is voluntary. However, we can
only process your visit if you provide us with the personal data that is
necessary to document the visit and to ensure security in our company.
Automated decision making
In principle,
we do not use fully automated decision-making in accordance with Art. 22 GDPR
to document your visit. If we use these procedures in individual cases, we will
inform you of this separately or obtain your consent if this is required by
law.
Data protection information for
image and film recordings
Data
protection information on the processing of your data in accordance with
Articles 13 and 21 of the GDPR.
Lieber Besucher,
In accordance
with the requirements of Articles 13 and 21 of the European General Data
Protection Regulation (GDPR), we hereby inform you about the processing of your
personal data and your rights under data protection law in this regard. To
ensure that you are fully informed about the processing of your personal data
in the context of this event, please take note of the following information.
The processing takes place in the form of a photo and/or film recording as well
as the publication of the image and/or film.
Purpose and legal basis of the
processing
We process
your personal data in accordance with the provisions of the European General
Data Protection Regulation (GDPR) and the German Federal Data Protection Act
(BDSG).
Insofar as the
recording and/or publication of an image and/or film for the purpose to be
determined in each case has been agreed in a contract whose contractual
partners are the controller named in section 1 and you as the data subject, the
lawfulness of this processing is given in accordance with Art. 6 para. 1 lit. b
GDPR.
If you give us
your express consent for the purpose to be determined in each case, the
lawfulness of this processing is based on your consent in accordance with Art.
6 para. 1 lit. a GDPR. Any consent given can be revoked at any time with effect
for the future.
Furthermore,
the production and/or publication of an image and/or film for the purpose of
documentation and public relations work is based on our legitimate interest
pursuant to Art. 6 para. 1 lit. f GDPR, provided that the production and
publication of photographs and/or video recordings can be assumed
on the basis of your legitimate trust. Our legitimate interest here is that the publication
of selected image/video files in (print) publications and on our website/social
media profiles or similar is necessary for our public relations work. This
applies to larger events with an unmanageable number of participants, provided
that the person concerned is only an “accessory” and no
secret, covert recordings, recordings from the private sphere, discriminatory
photos or those that allow conclusions to be drawn about data in accordance
with Article 9 (1) of the GDPR, e.g. religion, health, sex life. Recordings of
children are also excluded.
Categories of personal data
The personal
data processed by us is image and/or film recordings.
In the event of processing on the basis
of a contract or explicit consent, further personal data (e.g. first name,
surname, professional position) may be added as specified in the respective
contract or consent.
Sources of the data
We process
personal data in the form of images and/or films taken by you in the context of
events or in the event of processing on the basis of a contract or express
consent.
Recipient of the data
We only pass
on your personal data within our company to those areas and persons who require
this data to safeguard our legitimate interests.
We may
transfer your personal data to companies affiliated with us insofar as this is
permitted within the scope of the purposes and legal bases specified in this data
protection information. This may also take place within the framework of joint
responsibility in accordance with Art. 26 GDPR.
The data is
transmitted to when it is published on our website:
The data is transmitted to when it is published on our social media
channels:
Transfer to a third country
Personal data
will only be transferred to countries outside the EEA (European Economic Area)
or to an international organization if this is necessary for the purposes of
documentation and public relations, or in the case of processing on the basis
of a contract or express consent for the purpose stated in each case, if the
transfer is required by law or if you have given us your consent. In these
cases, the recipients may include affiliated companies and processors. In these
cases, data is transferred in compliance with Art. 46 GDPR or Art. 49 GDPR.
It cannot be
ruled out that data published on the Internet may also reach third countries.
Duration of data storage
Where
necessary, we process and store your personal data for the duration of our
legitimate interest. The data will be deleted if it is no longer required for
the aforementioned purposes or if you have exercised your right to object. If
the recording and/or publication of images and/or films is based on your
consent, we will delete the relevant images and/or films immediately after
receiving your revocation, unless further processing can be based on a legal
basis for processing without consent.
Please note
that information posted on the Internet, including image and film recordings,
can easily be copied and further processed. There are specialized archiving
services whose aim is to permanently document the status of certain websites at
certain points in time. This can mean that information published on the
Internet can still be found elsewhere even if it has been deleted from the
website on which it was originally published.
Necessity of providing personal
data
You are free
to decide whether or not to allow the taking and/or publication of pictures
and/or films. Public relations work at events is only possible for us –
provided there are no conflicting interests on your part – if we are permitted
to take these photographs. If you take part in an event and do not present us
with any conflicting interests, we will assume that you consent to photos and
videos being taken. If you have given us your consent to take and/or publish
photos and/or films, we will use them for the above-mentioned purpose. If you
have not given your consent, we will take this into account accordingly when
recording and/or publishing.
Automated decision making
In principle,
we do not use fully automated decision-making pursuant to Art. 22 GDPR for the
recording and/or publication of images and/or films. Should we use these
procedures in individual cases, we will inform you of this separately or obtain
your consent if this is required by law.
Your rights as a data subject
Every data
subject has the right of access pursuant to Art. 15 GDPR, the right to
rectification pursuant to Art. 16 GDPR, the right to erasure pursuant to Art.
17 GDPR, the right to restriction of processing pursuant to Art. 18 GDPR, the
right to notification pursuant to Art. 19 GDPR and the right to data
portability pursuant to Art. 20 GDPR.
In addition,
you have the right to lodge a complaint with a data protection supervisory
authority in accordance with Art. 77 GDPR if you believe that the processing of
your personal data is not lawful. The right to lodge a complaint applies
without prejudice to other administrative or judicial remedies.
If the
processing of the data is based on your consent, you have the right to withdraw
your consent to the use of your personal data at any time in accordance with
Art. 7 GDPR. Please note that the revocation is only effective for the future.
Processing that took place before the withdrawal is not affected. Please also
note that we may have to retain certain data for a certain period of time in
order to comply with legal requirements.
Right to
object:
If your personal data is processed to protect legitimate interests in
accordance with Art. 6 para. 1 lit. f GDPR, you have the right to object to the
processing of this data at any time in accordance with Art. 21 GDPR for reasons
arising from your particular situation. We will then no longer process this
personal data unless we can demonstrate compelling legitimate grounds for the
processing. These must outweigh your interests, rights and freedoms, or the
processing must serve the assertion, exercise or defense of legal claims.
In individual
cases, we process your personal data for the purpose of direct advertising. You
have the right to object at any time to processing for the purpose of such
advertising. This also applies to profiling insofar as it is associated with
such direct advertising. If you object to processing for the purpose of direct
marketing, we will no longer process your personal data for these purposes.
To exercise
your rights, you can contact us at:
Elba
Technologies GmbH
For the
attention of Hatice Kqiku
Industriestrasse 23,
70565 Stuttgart
mail@elba-tech.com
Changes to
our privacy policy
We reserve the
right to change our security and data protection measures, insofar as this
becomes necessary due to technical developments. In such cases, we will also
adapt our privacy policy and publish it here. Please therefore note the current
version of our privacy policy.
Status: February 2024
Ich möchte von Ihrem Aktionsangebot profitieren und mir den Preisvorteil von insg. 5.900 € sichern. Kontaktieren Sie mich gerne unter der untenstehenden Email-Adresse bzw. Telefonnummer, um gemeinsam die Vorgehensweise und den Start-Termin festzulegen.