Source: https://langer-emv.de/cn/page/%E9%A1%B5%E8%84%9A/28/privacy-policy/41
Timestamp: 2019-04-25 23:44:36+00:00

Document:
Responsible body for the acquisition, processing and utilization of your personal data, in the sense of the General Data Protection Regulation (Art. 4 para. 7 GDPR) is the Langer EMV-Technik GmbH, Nöthnitzer Hang 31, 01728 Bannewitz, Germany and Gunter Langer Ingenieurbüro, Nöthnitzer Hang 31, 01728 Bannewitz, Germany.
Should you object to the acquisition, processing or utilization of your data by Langer EMV-Technik GmbH in keeping with the stipulations of these data-protection provisions, whether entirely or for individual measures, you can send your objection per e-mail, by fax or by letter again using the previously mentioned contact options.
We process personal data that we receive from you in the course of our business relationship. We receive the data directly from you, e.g. in the context of inquiries, orders, offers, order confirmations, contracts or through personal contacts with our employees. In addition, to the extent necessary for the provision of our services, we process your personal data which we may obtain from publicly accessible sources (e.g. commercial and association registers, press, Internet).
We process your personal data in accordance with the provisions of the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG). In the following we will inform you on which legal basis we process your data.
The processing of data takes place for the fulfilment of a contract with you or for the execution of pre-contractual measures, which take place on the basis of an inquiry. The purposes of data processing depend in detail on the specific business relationship.
Our interest in the respective processing arises from the respective purposes and is otherwise of an economic nature (efficient performance of tasks, procurement, avoidance of legal risks). As far as the specific purpose permits, we process your data pseudonymized or anonymized.
You can revoke your consent at any time. This also applies to the revocation of declarations of consent that you have given us before the validity of the GDPR, i.e. before 25 May 2018. The revocation of consent is only valid for future processing.
Your data will be passed on within the Langer EMV-Technik GmbH if this is necessary to fulfill our contractual and legal obligations or if the internal organization requires the passing on (e.g. central financial accounting, purchasing, development, production and logistics). Within the Langer EMV-Technik GmbH, appropriate and legal requirements for the protection of your personal data have been established.
In addition, we transfer data to service partners, such as logistics service providers or forwarding agencies, insofar as the transfer is necessary for their order. They receive the data required for delivery for their own use. We limit ourselves to the transmission of the data necessary for delivery.
If we transfer your data to a third country or an international organisation, this is always done in accordance with the requirements of the GDPR. In addition, in accordance with the principle of data minimization, we only transmit data that is limited to the minimum necessary.
In some cases, we use service providers whose headquarters, parent company or sub-service provider are located in a third country. Your data will only be transferred if the European Commission has decided that an adequate level of protection exists in a third country (Art. 45 GDPR), appropriate guarantees are provided (e.g. standard contractual clauses issued by the European Commission) and enforceable rights and effective remedies are available to you as a party concerned. We have concluded a contract with the service provider to ensure compliance with the basic European general data protection regulation and its requirements.
Fulfilment of commercial and tax storage obligations in accordance with e.g. the German Commercial Code (HGB), Fiscal Code (AO), Money Laundering Act (AMLA). The periods for storage and documentation specified there range from two to ten years.
As part of our business relationship, you must provide the personal data required for the establishment and execution of the respective business relationship and the fulfilment of the associated contractual obligations or which we are legally obliged to collect. Without this data we will generally not be able to enter into the business relationship with you and to fulfil the resulting obligations.
In principle, we do not use fully automated decision making according to Art. 22 GDPR for the establishment and implementation of the business relationship. Should we use these procedures in individual cases, we will inform you separately, insofar as this is required by law.
In accordance with Art. 15 GDPR you can require information about your personal data processed by us. If your details are not or no longer accurate, you can request a correction (Art. 16 GDPR). Should your details be incomplete, you may demand a completion. If we have passed on your details to third parties, we will inform these third parties about your correction - insofar as this is required by law.
Please note that legal obligations of the person responsible can lead to the fact that your data cannot be finally deleted or only after expiration of a period.
In addition, you have a right to limitation of processing in accordance with Art. 18 GDPR, the right of objection under Art. 21 GDPR and the right to data transferability under Art. 20 GDPR. The restrictions according to §§ 34 and 35 BDSG apply to the right to information and the right of cancellation. In addition, there is a right of appeal to a competent data protection supervisory authority (Art. 77 GDPR in conjunction with § 19 BDSG).
You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you on the basis of Art. 6 para. 1 p. 1 s. 1 lit. f GDPR (data processing on the basis of a balance of interests), including profiling within the meaning of Art. 4 para. 4 GDPR based on this provision. If you object, we will no longer process your personal data, unless we can prove compelling reasons worthy of protection for the processing, which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
When using these general data and information, the Langer EMV-Technik GmbH does not draw any conclusions about the data subject. Rather, this information is needed to (1) deliver the content of our website correctly, (2) optimize the content of our website as well as its advertisement, (3) ensure the long-term viability of our information technology systems and website technology, and (4) provide law enforcement authorities with the information necessary for criminal prosecution in case of a cyber-attack (according to Art. 6 para. 1 p. 1 S. 1 lit. f GDPR).
Therefore, the Langer EMV-Technik GmbH analyzes anonymously collected data and information statistically, with the aim of increasing the data protection and data security of our enterprise, and to ensure an optimal level of protection for the personal data we process. The anonymous data of the server log files are stored separately from all personal data provided by a data subject.
On the website of the Langer EMV-Technik GmbH and Gunter Langer Ingenieurbüro, users are given the opportunity to subscribe to our enterprise's newsletter.
The Langer EMV-Technik GmbH and Gunter Langer Ingenieurbüro inform its customers and business partners regularly by means of a newsletter about enterprise offers. The enterprises' newsletter may only be received by the data subject if (1) the data subject has a valid e-mail address and (2) the data subject registers for the newsletter shipping. A confirmation e-mail will be sent to the e-mail address registered by a data subject for the first time for newsletter shipping, for legal reasons, in the double opt-in procedure. This confirmation e-mail is used to prove whether the owner of the e-mail address as the data subject is authorized to receive the newsletter.
The personal data collected as part of a registration for the newsletter will only be used to send our newsletter. In addition, subscribers to the newsletter may be informed by e-mail, as long as this is necessary for the operation of the newsletter service or a registration in question, as this could be the case in the event of modifications to the newsletter offer, or in the event of a change in technical circumstances. There will be no transfer of personal data collected by the newsletter service to third parties. The subscription to our newsletter may be terminated by the data subject at any time. The consent to the storage of personal data, which the data subject has given for shipping the newsletter, may be revoked at any time.
The data subject may, at any time, prevent the setting of cookies through our website by means of a corresponding setting of the web browser used, and may thus permanently deny the setting of cookies. Furthermore, already set cookies may be deleted at any time via an web browser or other software programs. This is possible in all popular web browsers. If the data subject deactivates the setting of cookies in the web browser used, not all functions of our website may be entirely usable.
The website of the Langer EMV-Technik GmbH contains information that enables a quick electronic contact to our enterprise, as well as direct communication with us, which also includes a general address of the so-called electronic mail (e-mail address). If a data subject contacts the controller by e-mail, the personal data transmitted by the data subject are automatically stored. Such personal data transmitted on a voluntary basis by a data subject to the data controller are stored for the purpose of processing or contacting the data subject. There is no transfer of this personal data to third parties.
We use Google Analytics on our website. Google Analytics is a web analytics service. Web analytics is the collection, gathering, and analysis of data about the behavior of visitors to websites. A web analysis service collects, inter alia, data about the website from which a person has come (the so-called referrer), which sub-pages were visited, or how often and for what duration a sub-page was viewed. Web analytics are mainly used for the optimization of a website and in order to carry out a cost-benefit analysis of Internet advertising.
Through certification according to the EU-US Privacy Shield Google guarantees that it will follow the EU's general data protection regulations when processing data in the United States. For further information click on the following link: www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.
The purpose of the Google Analytics component is to analyze the traffic on our website. Google uses the collected data and information, inter alia, to evaluate the use of our website and to provide online reports, which show the activities on our website, and to provide other services concerning the use of our website for us. Our legitimate interest lies in the analysis, optimization, and economic operation of our website. The legal basis is Art. 6 para. 1 p. 1 lit. f GDPR.
Google Analytics places a cookie on the information technology system of the data subject. The definition of cookies is explained above. With the setting of the cookie, Google is enabled to analyze the use of our website. With each call-up to one of the individual pages of this website, which is operated by the controller and into which a Google Analytics component was integrated, the web browser on the information technology system of the data subject will automatically submit data through the Google Analytics component for the purpose of online advertising and the settlement of commissions to Google. During the course of this technical procedure, the enterprise Google gains knowledge of personal information, such as the IP address of the data subject, which serves Google, inter alia, to understand the origin of visitors and clicks, and subsequently create commission settlements.
With each call-up to one of the individual pages of this website, which is operated by the controller and on which a YouTube component (YouTube video) was integrated, the web browser on the information technology system of the data subject is automatically prompted to download a display of the corresponding YouTube component. Further information about YouTube may be obtained under https://www.youtube.com/yt/about/en/. During the course of this technical procedure, YouTube and Google gain knowledge of what specific sub-page of our website was visited by the data subject.
This website contains a link to the Facebook page of Langer EMV-Technik GmbH. Facebook is a social network. A social network is a place for social meetings on the Internet, an online community, which usually allows users to communicate with each other and interact in a virtual space. A social network may serve as a platform for the exchange of opinions and experiences, or enable the Internet community to provide personal or business-related information. Facebook allows social network users to include the creation of private profiles, upload photos, and network through friend requests.
This website contains a link to the LinkedIn page of Langer EMV-Technik GmbH. LinkedIn is a web-based social network that enables users with existing business contacts to connect and to make new business contacts. Over 400 million registered people in more than 200 countries use LinkedIn. Thus, LinkedIn is currently the largest platform for business contacts and one of the most visited websites in the world.
This website contains a link to the XING page of Langer EMV-Technik GmbH. XING is an Internet-based social network that enables users to connect with existing business contacts and to create new business contacts. The individual users can create a personal profile of themselves at XING. Companies may, e.g. create company profiles or publish jobs on XING.
With each call-up to one of the individual pages of this website, which is operated by the controller and on which a XING component (XING plug-in) was integrated, the web browser on the information technology system of the data subject is automatically prompted to download a display of the corresponding XING component of XING. Further information about the XING plug-in the may be accessed under dev.xing.com/plugins. During the course of this technical procedure, XING gains knowledge of what specific sub-page of our website was visited by the data subject.
If the data subject is logged in at the same time on XING, XING detects with every call-up to our website by the data subject—and for the entire duration of their stay on our website, which specific sub-page of was visited by the data subject. This information is collected through the XING component and associated with the respective XING account of the data subject. If the data subject clicks on the XING button integrated on our website, e.g. the "Share"-button, then XING assigns this information to the personal XING user account of the data subject and stores the personal data.
The data controller shall collect and process the personal data of applicants for the purpose of the processing of the application procedure. The processing may also be carried out electronically. This is the case, in particular, if an applicant submits corresponding application documents by e-mail or by means of a web form on the website to the controller. If the data controller concludes an employment contract with an applicant, the submitted data will be stored for the purpose of processing the employment relationship in compliance with legal requirements. If no employment contract is concluded with the applicant by the controller, the application documents shall be automatically erased two months after notification of the refusal decision, provided that no other legitimate interests of the controller are opposed to the erasure. Other legitimate interest in this relation is, e.g. a burden of proof in a procedure under the German General Equal Treatment Act (AGG).
The legal basis for the data processing of the application procedure is § 26 para. 1 p. 1 BDSG in conjunction with Art. 88 para. 1 GDPR.
If you are hired as a result of the application process, we will store the data you provide during the application process in your personnel file for the purpose of the usual organizational and administrative process, naturally in compliance with further legal obligations. The legal basis for this processing is § 26 para. 1 p. 1 BDSG in conjunction with Art. 88 para. 1 GDPR.
If we do not hire you, we will automatically delete the data submitted to us two months after the final decision is made. We will not delete the data, however, if we must store the data for legal reasons such as evidence of equal treatment of applicants, until any legal action is concluded, or four months. In this case, the legal basis is Art. 6 para. 1 p. 1 lit. f GDPR and § 24 para. 1 no. 2 BDSG. Our legitimate interest lies in any legal defense we may have to mount.
Legal basis for the household and tax records is Art. 6 para. 1 p. 1 lit. c GDPR in conjunction with § 147 of the Fiscal Code of Germany (AO).
If you expressly consent to a longer storage of your data, e.g. for your inclusion in a database of applicants or interested parties, the data will be processed further on the basis of your consent. The legal basis is then Art. 6 para. 1 p. 1 lit. a GDPR. You may withdraw your consent at any time per Art. 7 para. 3 GDPR with future effect.

References: Art. 22
 Art. 15
 Art. 18
 Art. 21
 Art. 20
 § 19
 Art. 6
 Art. 4
 Art. 6
 Art. 6
 § 26
 Art. 88
 § 26
 Art. 88
 Art. 6
 § 24
 Art. 6
 § 147
 Art. 6
 Art. 7