Source: https://www.imms.de/en/privacy-statement.html
Timestamp: 2019-04-20 15:02:41+00:00

Document:
You will not be scanned here, but only at airports – thanks to our precision drives (TESCA project). Images: Supracon.
We place great importance on the protection of your personal data. As the protection of both your privacy and your business data is of particular importance to us, we observe the data protection regulations applicable in Germany.
In the following, we would like to inform you in detail about what data are collected during your visit to our site and the use of our offerings there, and how they are subsequently processed or used by us, as well the accompanying technical and organisational protective measures we have taken.
(1) If you simply visit the website, we do not collect any personal data. However, every server automatically stores the accesses to websites. The temporary storage of the IP address by the system is necessary in order to allow delivery of the website to the user's computer. This requires that the user’s IP address is stored for the duration of the session. For the purpose of system security, our web server temporarily records the IP address of the requesting computer, the browser you are using, the operating system, the date and time of access, the webpages you visit, the Uniform Resource Locators (URL) requested on our website and the previously visited website (referrer URL). This information is stored anonymously and not associated with your personal information. Conclusions cannot be drawn as to your person or your individual behaviour. The legal basis for the temporary storage of the data and log files is Art. 6(1) lit. f GDPR.
(2) Computer-related data are stored by us to record trends and compile statistics. These stored data also serve the purpose of identifying and tracking unauthorised attempts to access our server. We create profile information about the use of our own websites exclusively in anonymised form and only to improve user navigation and to optimise the offering based on user interests. Personal surfing profiles or similar are not created or processed from this.
(3) The website uses the following cookies in various locations.
Cookies are small text files that are downloaded to your computer and stored by your browser. Cookies are used to make our website more user-friendly, more effective and more secure. These purposes are also the basis for our legitimate interests in the processing of personal data according to Art. 6(1) lit. f GDPR. Session cookies are automatically deleted after your visit.
All of the cookies used by us per se on this website are so-called session cookies, which are deleted automatically after your visit to the website ends. The exception is a permanent cookie, which you as the user can actively set in order to deactivate our web analytics tool, Matomo. For details, please refer to paragraph 3 on Matomo.
The legal basis for the processing of personal data using cookies is Art. 6(1) lit. f GDPR.
(4) The data are deleted as soon as they are no longer required to achieve the purpose of their collection.
In the case of the collection of data for the provision of the website, this applies when the respective session has ended. IP addresses are in principle deleted no later than seven days after the date of their collection. Further storage beyond this is possible. In this case, the IP addresses of the users are deleted or altered, so that assignment of the calling client is no longer possible.
(5) Collection of the data in order to provide the site and the storage of the data in log files is absolutely necessary for the operation of the website. Therefore, there is no right of objection on the part of the user.
These data are evaluated separately from other data that you actively enter on our pages. It is not possible for us to assign these data to a specific person.
Matomo also uses so-called ‘cookies’. These are text files that are stored on your computer and used by us to analyse use of the website. To this end, the usage information generated by the cookie (including your abbreviated IP address) is transmitted to our server and stored to be used for analysis purposes, which in turn is used for website optimisation on our part. Your IP address is immediately anonymised during this process, so that as a user you remain anonymous to us. The information generated by the cookie about your use of this website is not disclosed to third parties.
(1) We only collect, store and process the personal data actively transmitted by you (for example: your name, address or e-mail address), insofar as this is required for the processing of requests or the fulfilment of our contractual obligations. Personal data are generally only collected from our users and used after the user has consented. One exception applies in cases where obtaining consent beforehand is not possible on factual grounds and the processing of the data is permitted by law or required for the fulfilment of our contract. Insofar as we obtain consent from the data subject for personal data processing operations, Art. 6(1) lit. a of the EU General Data Protection Regulation (GDPR) serves as the legal basis for the processing of personal data. With regard to the processing personal data that is required to fulfil a contract to which the data subject is party, Art. 6(1) lit. b GDPR serves as the legal basis. This also applies for processing operations that are necessary for the implementation of pre-contractual measures. Insofar as the processing of personal data is required to comply with a legal obligation on the part of our company, Art. 6(1) 1 lit. c GDPR serves as the legal basis. If the processing is required to protect a legitimate interest of our company or a third party and if the interests, rights and fundamental freedoms of the person concerned do not outweigh the first interest mentioned, Art. 6(1) lit. f GDPR serves as the legal basis for the processing.
(2) Your registered data are always encrypted on our systems. This protects the communication between you and our server and prevents the misuse of data. For encryption we use a recognised and widely used system that is deemed to be secure in the respective current version.
(3) On our website, it is possible to register for our press mailing list and also to subscribe to receive our press information by e-mail. Upon registration, the data from the input mask is transmitted to us. These data are: e-mail address of the user, IP address of the calling computer, date and time of registration. You can unsubscribe from our press mailing list and delete your data at any time using a link in the press area or by e-mail to presse(at)imms.de. Your consent is obtained and you are referred to this privacy statement regarding the processing of the data in the context of the registration process. The data are not disclosed to third parties in the context of data processing for the sending of press releases. The data are used exclusively to send the press releases. The legal basis for the processing of the data after the user registers for the press mailing list is the consent of the user Art. 6(1) lit. a GDPR. The collection of the user’s e-mail address is used to send press releases to the addressees stored in the press mailing list. The data are deleted as soon as they are no longer required to achieve the purpose of their collection. Accordingly, the user’s e-mail address is stored for as long as the subscription to receive press releases is active. The subscription to receive press releases can be cancelled at any time by the user concerned. For this purpose, a corresponding link can be found in every e-mail containing a press release.
This also allows consent to the storage of personal data collected during the registration process to be revoked.
(4) You can register for our events via our website. If a user avails of this option, the data entered in the input mask are sent to us and stored. These data are: E-mail address, name, first name, company, address and, if necessary depending on the event, options for pre-booked programme items. When the message is sent, the following data are also stored: The website visitor's IP address, the date and time of sending. The double opt-in procedure is used for registration. Your registration and your e-mail address are deleted from our database if you do not confirm the link sent by us or do not confirm it in time. We will not accept any further registrations under your e-mail address until you have confirmed your e-mail address. The legal basis for the processing of the data is the consent of the user Art. 6(1) lit. a GDPR.
(5) On our website, the BASe-Box software in the download area allows software to be downloaded. If a user avails of this option, the data entered in the input mask is sent to us and stored. This solely concerns the e-mail address specified by you. When the message is sent, the following data are also stored: The website visitor's IP address, the date and time of sending. The double opt-in procedure is used for registration. Your registration and your e-mail address are deleted from our database if you do not confirm the link sent by us or do not confirm it in time. We will not accept any further registrations under your e-mail address until you have confirmed your e-mail address. The legal basis for the processing of the data is the consent of the user Art. 6(1) lit. a GDPR. You can self-edit or delete your data stored with us at any time in the download area. You can find the links for editing and deletion in the download area after registering.
(6) Furthermore, we can be contacted using the e-mail address provided, imms(at)imms.de. In this case, the user’s personal data transmitted with the e-mail is stored. Data will not be forwarded to third parties without your consent. The data are used exclusively to process the conversation. The legal basis for the processing of the data is the consent of the user Art. 6(1) lit. a GDPR. The legal basis for the processing of the data transmitted in the course of sending an e-mail is Art. 6(1) lit. f GDPR. If the aim of contact by e-mail is the conclusion of a contract, the additional legal basis for the processing is Art. 6(1) lit. b GDPR. The processing of personal data is solely used by us to process the establishment of contact. The necessary legitimate interest in the processing of the data also lies herein.
(7) The personal data of the data subject are deleted or disabled as soon as the purpose of storage expires. For the personal information sent via e-mail, this is the case when the conversation with the user has ended. The conversation has ended if it is clear from the circumstances that the subject matter in question has been conclusively clarified. The additional personal data collected during the send process are pseudonymised or deleted at the latest after a period of seven days. If the user contacts us by e-mail, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued. Furthermore, storage may also occur if so required by European or national law under European Union regulations, laws or other provisions to which we are subject. Blocking or deletion of data is also carried out if a storage period specified by the standards referred to expires, unless there is a need for further storage of the data in order to conclude or execute a contract.
You can request confirmation from us as to whether personal data pertaining to you is processed by us.
(8) the existence of automated decision-making including profiling according to Art. 22 (1) and (4) GDPR and - at least in these cases - pertinent information on the logic involved as well as the scope and desired impact of such processing for the data subject.
You have the right to demand information as to whether or not the personal data pertaining to you is transmitted to a third country or an international organisation. In this context, you can demand to be informed via the appropriate guarantees according to Art. 46 GDPR in connection with the transmission.
You have a right to correction and/or completion, insofar as the processed personal data pertaining to you is inaccurate or incomplete. We will make the correction immediately.
(4) you have submitted an objection to the processing in accordance with Art. 21(1) GDPR and it has not yet been decided whether our legitimate reasons outweigh your reasons.
If the processing of personal data pertaining to you is restricted, these data – apart from their storage – may only be processed with your consent or for the assertion, exercise or defence of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of substantial public interest of the Union or of a Member State.
If the restriction of processing according to the above-mentioned prerequisites is restricted, you will be informed of this by us before the restriction is lifted.
(1) The personal data pertaining to you are no longer required for the purposes for which they were collected or otherwise processed.
(2) You revoke your consent on which the processing according to Art. 6(1) lit. a or Art. 9(2) lit. a GDPR was based and there is no other legal basis for the processing.
(4) The personal data pertaining to you has been processed unlawfully.
(5) The deletion of the personal data pertaining to you is required in order to comply with a legal obligation in accordance with Union law or the law of the Member States to which we are subject.
(6) The personal data pertaining to you were collected in relation to information society services in accordance with Art 8(1) GDPR.
If we have made the personal data pertaining to you public and if we are obliged to delete such data according to Art. 17(1) GDPR, taking into account the available technology and the implementation costs, we shall take appropriate measures, including those of a technical nature, to inform those responsible for data processing who process the personal data that you as the data subject have requested the deletion of all links to these personal data or copies or replicas of these personal data.
If you have asserted the right to correction, deletion or restriction of the processing against us, we are obliged to inform all recipients to whom the personal data has been disclosed of this correction or deletion of the data or restriction of processing, unless this proves impossible or would involve disproportionate effort.
You have the right to be informed of these recipients by us.
In exercising this right, you also have the right to have the personal data pertaining to you transmitted directly to another responsible body by us, insofar as this is technically feasible. Liberties and rights of other persons shall not be affected by this.
The right to data portability does not apply to the processing of personal data that is required for the performance of a task in the public interest or in the exercise of public authority that has been transferred to us.
You have the right, for reasons related to your specific situation, to object at any time to the processing of personal data pertaining to you that is carried out on the basis of Art. 6(1) lit. e or f GDPR; this also applies for profiling based on these provisions.
We then no longer process the personal data pertaining to you, unless we can prove compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or if the processing is used for the assertion, exercise or defence of legal claims.
If the personal data pertaining to you is processed in order to operate direct advertising, you have the right at any time to object to the processing of the personal data pertaining to you for the purposes of such advertising; this also applies for profiling, insofar as it is in connection with such direct advertising. If you object to the processing for purposes of direct advertising, the personal data pertaining to you will no longer be processed for these purposes.
You have the option in connection with the use of information society services - regardless of Directive 2002/58/EC - to exercise your right of objection by means of automated processes in which technical specifications are used.
You have a right of revoke your declaration of consent at any time under data protection law. By revoking consent, the legality of the processing carried out on the basis of the consent up until revocation shall not be affected.
Without prejudice to any other administrative or judicial remedy, you have the right to file a complaint with a supervisory authority, in particular in the Member State of your place of residence, workplace or the location of the alleged infringement, if you are of the opinion that the processing of personal data pertaining to you breaches GDPR.
The supervisory authority to which the complaint is submitted informs the complainant of the status and the results of the complaint including the possibility of a judicial remedy according to Art. 78 GDPR.
(1) We keep all information that is to be handled as confidential given to us in the run-up to and within the context of the contractual relationship secret and only use this subject to the prior agreement of the respective other contracting party with respect to third parties - irrespective of the purpose. Information that is to be handled as confidential includes information that is expressly described as confidential information by the party that provided it and information that is clearly confidential based on the circumstances of its provision. In particular, your personal data and the data used, should we become aware of this, is to be treated as confidential.
were known to the public after the date of receipt or were generally accessible without us being responsible for this.
(3) Public statements by the parties concerning a cooperation will only be made subject to prior mutual agreement.
(4) The obligations according to paragraph 1 continue to exist after the contract has ended for an indefinite period of time, for as long as an exceptional case according to paragraph 2 has not been proven.
This privacy statement applies to the services of IMMS Institut für Mikroelektronik- und Mechatronik-Systeme gemeinnützige GmbH (IMMS GmbH) on the website www.imms.de.
You can retrieve and print this privacy statement from any page of the website using the link.
This privacy statement is currently valid and is dated 25/05/2018. If circumstances arise that require a new privacy statement, the updated privacy statement will be published here and will apply from the date of publication.
In the following, we will inform you about the collection of personal data at the time of collection of this data.
(1) We collect, store and process your personal data in order to process your application and for the application process.
(2) When you contact us, the personal data actively transmitted by you is stored and processed, insofar as this is required for the application process.
This concerns the following data: form of address, title, first name, surname, e-mail address, telephone number, the contents of your application documents such as the cover letter, CV, references, qualifications, and your photo.
Personal data are generally only collected from our users and used after the user has consented. One exception applies in cases where obtaining consent beforehand is not possible on factual grounds and the processing of the data is permitted by law.
Insofar as we obtain the consent of the applicant for personal data processing operations, Art. 6(1) lit. a of the EU General Data Protection Regulation (GDPR) serves as the legal basis for the processing of personal data.
With regard to the processing of personal data that is required to fulfil a contract to which the data subject is party, Art. 6(1) lit. b GDPR serves as the legal basis. This also applies for processing operations that are necessary for the implementation of pre-contractual measures.
Insofar as the processing of personal data is required to comply with a legal obligation on the part of our company, Art. 6(1) lit. c GDPR serves as the legal basis.
Insofar as the application leads to the establishment of an employment relationship, Section 26 of the German Federal Data Protection Act (BDSG) is the legal basis for the processing of personal data.
If the processing is required to protect a legitimate interest of our company or a third party and if the interests, rights and fundamental freedoms of the applicant do not outweigh the first interest mentioned, Art. 6(1) lit. f GDPR serves as the legal basis for the processing.
(3) Your personal data are not passed on to third parties.
(4) Your registered data stored in our systems are protected against access by unauthorised third parties. This prevents data misuse.
(5) The applicant’s personal data are deleted or disabled as soon as the application process is finished, the decision does not fall to you and insofar as there are no legal retention obligations. Insofar as you have expressly consented to the inclusion of your data in the applicant pool in case a suitable position is found within one year of receipt of your application, your personal data will be retained for this period and deleted after the fruitless elapse of one year.
If the processing of personal data pertaining to you is restricted, these data - apart from their storage - may only be processed with your consent or for the assertion, exercise or defence of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of substantial public interest of the Union or of a Member State.
(3) You object to the processing in accordance with Art. 21(1) GDPR and there are no overriding legitimate reasons for the processing, or you object to the processing in accordance with Art. 21(2) GDPR.
(1) We keep all information that is to be handled as confidential given to us in the run-up to and within the context of the contractual relationship secret and only use this subject to the prior agreement of the respective other contracting party with respect to third parties - irrespective of the purpose. Information that is to be handled as confidential includes information that is expressly described as confidential information by the party that provided it and information that is clearly confidential based on the circumstances of its provision. In particular, your personal data and the data used, should we become aware of this, are to be treated as confidential.
(1) When you contact us by phone, e-mail, fax or via a contact form, the personal data actively transmitted by you (for example: your name, address or e-mail address) are stored and processed, insofar as this is required for the processing of requests or the fulfilment of our contractual obligations. Personal data is generally only collected from our users and used after the user has consented. One exception applies in cases where obtaining consent beforehand is not possible on factual grounds and the processing of the data is permitted by law.
Insofar as we obtain consent from the data subject for personal data processing operations, Art. 6(1) lit. a of the EU General Data Protection Regulation (GDPR) serves as the legal basis for the processing of personal data.
Insofar as the processing of personal data is required to comply with a legal obligation on the part of our company, Art. 6(1) 1 lit. c GDPR serves as the legal basis.
If the processing is required to protect a legitimate interest of our company or a third party and if the interests, rights and fundamental freedoms of the data subject do not outweigh the first interest mentioned, Art. 6(1) lit. f GDPR serves as the legal basis for the processing.
(2) Your registered data are always stored in encrypted form on our systems. This prevents data misuse. For encryption we use a recognised and widely used system that is deemed to be secure in the respective current version.
(3) The personal data of the data subject are deleted or disabled as soon as the purpose of storage expires. This is the case when the respective conversation with the user has ended. The conversation has ended if it is clear from the circumstances that the subject matter in question has been conclusively clarified. Furthermore, storage may also occur if so required by European or national law under European Union regulations, laws or other provisions to which we are subject. Blocking or deletion of data is also carried out if a storage period specified by the standards referred to expires, unless there is a need for further storage of the data in order to conclude or execute a contract.
(4) We regularly forward the personal data that has to be collected for the purposes of preparing the financial accounting and business management analyses for submission to the tax authority to our tax advisor.
(5) We regularly forward the personal data that is required to prepare the wage and salary accounting to DATEV eG.
(6) Furthermore, personal data are collected at our principal bank as soon as you make a deposit. These data are subject to the obligation of confidentiality.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 22
 Art. 46
 Art. 21
 Art. 6
 Art. 9
 Art 8
 Art. 17
 Art. 6
 Art. 78
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 21
 Art. 21
 Art. 6
 Art. 6
 Art. 6