Privacy Notice Elbe Holding GmbH & Co. KG 1. Subject of this Privacy Notice The protection of your personal data (hereinafter referred to as „data“) is very important to us. Therefore, we would like to inform you in detail about which data will be collected when visiting and using our website and how these are processed or used by us, as well as which protective measures we have taken from a technical and organizational point of view. 2. Responsible Party/Service Provider Responsible party in terms of German Data Protection Act (BDSG) and service provider is Elbe Holding GmbH & Co. KG Gerokstraße 100 74321 Bietigheim – Bissingen Responsible party is the natural or legal person, which alone or jointly with others determines the purposes and means of the processing of personal data (e. g. names, email addresses or similar). Data Protection Officer We have appointed a Data Protection Officer for our company. To get in contact, please send an email to: datenschutz@elbe.elbe-group.de. 3. Personal Data Personal data means any information concerning the personal or material circumstances of a specific or identifiable natural person, as e. g. first name, surname, address, phone number and date of birth. Information that is not directly associated with your real identity (e. g. preferred websites or number of users of a website) are no personal data. 4. Privacy Policy for Application Procedure We process applicant data only for the purpose of the application procedure respecting the legal regulations. The processing of such data is effected so that we can fulfill our (pre)contractual obligations in the workflow of the application process within the meaning of art. 6 section 1 lit. b. DSVGO art. 6 section 1 lit. f. DSVGO provided that processing the data e. g. in a legal process becomes necessary (in Germany § 26 BDSG applies additionally). The application process requires that the applicants personally send us the application data. The necessary applicant data result from the job description. Generally, these are information on person, postal and contact addresses as well as the corresponding documents for a job application such as letter, curriculum vitae, certificates and references. Furthermore, additional information which provides the applicant without a request. Submitting the application to us, the applicants agree to processing their data for the purpose of the application procedure according to the way and extent stated in this privacy notice. Should specific personal data according to art. 9 section 1 GDPR be given in the course of the application procedure voluntarily, its handling is additionally effected as per art. 9 section 2 lit. b GDPR (as e. g. health data, status of severe disability or ethnic origin). If special information is necessary during the application process for the execution of the job and therefore asked for, its handling will additionally be effected as per art. 9 section 2 lit. a GDPR. Applicants can submit their application also by means of the contact form on our website. The data is transmitted in encrypted form according to the state of the art. Furthermore, applications can be sent to us by email. We, however, explicitly point out that emails are not sent in an encrypted form in general and that the applicants must take care for the encryption themselves. We can therefore not be responsible for the transmission path of the application between sender and receipt on our server and thus recommend to use the contact form on our website or mail service. Instead of an online application (via contact form and email) the applicants have also the possibility to send the applications by mail. In case of a successful application, we can process the data provided by the applicants for the purpose of the employment. Should the application to a job not be successful, all applicant data will be deleted. The applicant can withdraw the application at any time. In this case the applicant’s data will be deleted, too. The deletion is effected – subject to a legitimate revocation by the applicants – after a period of four months, so that we are able to answer possible follow-up questions regarding the application and to comply with our obligation to provide evidence with regard to the Equal Treatment Act. Invoices for possible compensation for travel expenses are archived according to the provisions of tax legislation. 5. Collection and Processing of Personal Data Scope and type of collection and use of your data differ whether you visit our website only for retrieval of information or you make use of our services offered: a) Informational use For the informational use of our website it is generally not necessary to indicate personal data. In this case, we collect and process only such data which transmits your internet browser automatically, such as: – Datum und Uhrzeit des Abrufs einer unserer Internetseiten – date and time of access of one of our sites – your type of browser – browser settings – used operation system – previously visited page – data volume transferred and access status (file transmitted, file not found etc.) and – your IP address. We collect and process such data during an informational visit exclusively in a non-personal form. This is made in order to allow the use of the websites you accessed, for statistical purpose and to improve our website. The IP address is stored only for the duration of your visit. A person-related analysis does not take place. b) Use of services Should you would like to make use of the services offered on our web page, such as ordering a company magazine or quotation request, it is necessary to indicate additional data. Further information can be given voluntarily, which is marked respectively. The collection and processing of your data is effected for the purpose to perform the service you requested, as e. g. to execute the quotation request or send you the company magazine you requested. If necessary, your data is given to service providers supporting us for the aforementioned purpose and which we selected carefully of course. These could be technical service providers or shipping service providers. A transmission of your data to third parties takes only place if we are required to do so by law. 6. Cancellation resp. Blocking of Data We adhere to the principles of data avoidance and data economy. Therefore, we store your personal data only as long as necessary for achieving the purposes stated or as stipulated by the various storage periods fixed by the legislator. After the respective purpose ceases to apply or after expiration of such storage periods the corresponding data shall be blocked or deleted routinely and in accordance with the statutory provisions. 7. Hosting and Email Dispatch The hosting services we utilize serve for providing the following services: infrastructure and platform services, calculating capacity, disk space and data bank service, email dispatch, safety and technical maintenance services, which we use for the purpose of the operation of this online offer. In this connection we resp. our hosting provider process stock data, contact information, content data, contract data, usage data, meta and communication data of (prospective) customers and visitors of this online offer on the basis of our legitimate interest in an efficient and secure provision of this online offer in accordance with art. 6 section 1 lit. f GDPR in connection with art. 28 GDPR (conclusion data processing agreement). 8. Collection of Access Data and Logfiles We resp. our hosting provider collect data on each access to the server on which this service is located (so-called server logfiles) on the basis of our legitimate interest as defined in art. 6 section 1 lit. f. GDPR. Access data is: name of requested website, file, date and time of access, transmitted data volume, report on successful access, type of web browser, your operating system, referrer URL (previously visited website), IP address and requesting provider. Logfile information is stored for a period of maximum 7 days due to safety reasons (e. g. clarification of abuse or fraud) and is deleted after that period. Data which must be stored for the purpose of proof are excluded from the deletion until the respective case is clarified. 9. Contact Form Should you get in contact with us by email or contact form regarding queries of any kind, you give us your voluntary consent for the purpose of contacting you. For this, a valid email address must be indicated which serves to allocate the request and to reply to it. The indication of further data is optional. Such data is stored for the purpose of processing the request and possible follow-up questions. After your request is settled, personal data is automatically deleted. 10. Use of Cookies We use the technique of cookies on our website. Cookies are small text files sent by our web server to your browser during your visit to the website and reserved on your computer for later access. We only use so called session cookies (also called temporary cookies), which are only buffered for the duration of your visit on our website. The cookies are deleted as soon as you close your browser session. With the settings in your browser you can determine if cookies can be set and accessed. In your browser you can deactivate the storage of cookies completely, restrict it to certain websites or configure it in a way that you will be automatically notified when a cookie shall be set and you are requested to reply. For complete functioning of our website it is essential for technical reasons to allow the session cookies. Collecting or storing personal data in cookies does not take place through us in this context. Nor do we apply techniques that use cookies to link incidental information with user data. 11. Cookie Banner On our sites the cloud service Cookiebot is used for providing the cookie banner. Provider is Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark. The cookie banner gives you information on which cookie types are used on our website. Cookies which are essential for operating our website may be stored on your computer without explicit consent. Beyond that, all other cookie types are stored on your end device only after your explicit approval. If an end user submits a consent on our website, the following data is documented automatically at Cybot: • IP number of end user in anonymized form (last three numbers are set to “0”). • Date and time of consent. • User agent of browser of end user. • URL from which the consent was sent. • An anonymized, incidental and encrypted key • Status of consent of end user, which serves as proof for agreement. The key and the status of consent are stored also in the browser of the end user in the cookie “CookieConsent”, so that the website can read and follow automatically the consent of the end user for all subsequent page requests and future end user sessions for up to 12 months. The key is used for the proof of consent and for the verification if the status of consent stored in the end user’s browser changed in comparison to the original consent which was transferred to Cybot. You will find further information in the privacy notice of Cybot: https://www.cookiebot.com/de/privacy-policy/. 12. Security / SSL Encryption For protecting the security of your data during transfer we use cryptographic technique via HTTPS which is state-of-the-art (e. g. SSL). Please note that a data transfer via internet is never 100% secure. We undertake to protect the personal user information, however, we cannot guarantee the security of such information, in case it is sent to or via our website. Therefore, the user always bears the risk of the transfer of such information. 13. Right of Withdrawal and Objection Please note that you can withdraw a consent you gave us with regard to data protection at any time. Within the scope of this privacy notice you may also object to a possible creation of a utilization profile by us for the purpose of advertising, market research or the design of our website to meet our users’ needs. If you would like to do so, please send an email to: vertrieb@elbe.elbe-group.de. 14. Right of Access On request, we will inform you at any time which personal data about you we have stored. 15. Social Media Plugins At present, we do not use any social media plug-ins. 16. Security of Data We have taken technical and organizational measures to protect incoming or collected personal data, especially against incidental or willful manipulation, loss, destruction or access by unauthorized persons. Our security measures are continuously improved in line with the technological progress. 17. Availability of Privacy Notice You can access and print this privacy notice from each page of our website using the link „Information/Data Protection“. 18. Update and Amendment of Privacy Notice If required this declaration will be updated, so that also our new websites are covered by this declaration or to include new services and functions. We reserve the right to modify the privacy notice at any time in compliance with the data privacy laws. We will inform you about amendments or updates on our website. 19. Questions to the Data Protection Officer Should you have questions regarding data protection, please write us an email or contact directly our person in charge for data protection: datenschutz@elbe.elbe-group.de The privacy notice was compiled partly with text modules from the privacy notice generator of activeMindAG and Datenschutz-Generator.de of attorney Dr. Thomas Schwenke. THE ORIGINAL SINCE 1919 Contact Elbe Holding GmbH & Co. KG Gerokstraße 100 74321 Bietigheim-Bissingen Phone: 07142/353-0 Fax: 07142/353-350 Information Imprint Data protection Cookies Terms and Conditions of Delivery and Sales Purchase Conditions Quality guideline