Website:
https://eggsec.de
III. Processing
The relevant information/advisories regarding processing is outlined below. For easier understanding we have structured this information according to the respective processing procedures. Please contact the Data Protection Offer for any questions you may have.
1. Provision of and general usage of the website
Any time you visit our website, our system automatically collects data and information from the device you are using for access (your computer, mobile phone, tablet, etc.); this data is necessary for you to make use of website functionalities/offers.
What kinds of personal data are processed
Data on the browser type and version used, operating system of the accessing device, host name of accessing computer, IP address of the accessing device (anonymised), date and time of access, websites and resources (images, files, other page content) accessed from our website and volume of data transferred.
This data is stored in log files generated by our system. This data is not stored with reference to the personal data of any specific user, thus individual website visitors are not identified.
Purpose and legal bases of data processing
The temporary (automated) storage of data is necessary for the duration of the website visit to enable the technical displaying of the website. Personal data is stored and processed for the purposes of ensuring website compatibility for as many visitors as possible, deterring improper usage and eliminating functional errors. This requires logging of the technical data of the accessing computer, minimising response time to address display errors, attacks on our IT systems and/or functional errors affecting our website. We additionally use data to optimise the website and maintain general security for our information technology systems.
Legal basis for the processing of personal data
Art. 6 paragraph 1 sub-paragraph 1 point f GDPR (Legitimate Interest). We have a legitimate interest in proper provision of the website, and in the identification, avoidance and fixing of errors.
Data recipients
We transmit personal data to the website host organisation IONOS SE in its capacity as contracted data processor.
Duration of storage
We erase your data immediately when it is no longer needed for the purposes stated above, and in no case later than three (3) months from the date of your website visit.
Objection, erasure
You may object to processing at any time in accordance with Article 21 GDPR, and demand the erasure of your data in accordance with Article 17 GDPR. Please refer to the advisories in the lower sections of this data privacy policy for information on the rights you enjoy and how to go about exercising them.
Further advisories
You have no legal or contractual obligation to provide personal data. There are no consequences for you for not providing such data.
No profiling takes place.
2. Contact forms
Contact forms are provided at various places on our website for you to use.
Purpose of processing, legal bases
The contact forms are provided to make it easier for you to contact us, i.e. to get in touch with your relevant contact person. Your personal data is processed for the purpose of addressing your communicated message, forwarding it on as necessary.
Personal data is processed for the purpose of setting a personal appointment with you at our trade fair stand, so that we can present our products to you and answer any questions you may have. Making such an appointment enables us to plan for your visit so we can focus on your needs and interests.
The legal basis for the processing is your consent as per Art. 6 paragraph 1 sub-paragraph 1 point a GDPR, which you implicitly grant by using the contact form.
Your contact form inquiry, and thus your personal data, may be transmitted to a so-called ‘third country’ as necessary to process your specific contact form inquiry based on the country you selected. Your consent to transfer in accordance with Art. 49 paragraph 1 sub-paragraph 1 point a GDPR constitutes an additional legal basis if there is no adequacy decision by the European Commission regarding the level of data protection afforded in the recipient country. In such case it is not possible to adequately guarantee processing security with regard to any individual. We endeavour at all times to ensure that your personal data enjoy the greatest possible protection.
Data recipients
The recipients of your personal data may be persons you have selected in third countries. Under certain circumstances it may be necessary to transfer data to a company belonging to the Luminator Technology Group as data controller.
Duration of storage, withdrawal of consent
Data are stored for as long as necessary to process your inquiry. You have the right to withdraw previously granted consent at any time without stating any reasons, with non-retrospective effect. We will then no longer process your personal data. Please note that withdrawal has no effect regarding the legality of processing prior to exercising of this right.
Further advisories
You have no legal or contractual obligation to provide personal data. There are no consequences for you for not providing such data.
No profiling takes place.
3. Repair service, orders
A means of directly contacting us is provided on our website regarding a repair service order or product order.
Purpose of processing and legal bases
We process your personal data in order to directly and efficiently communicate with you as our personal contact at the customer company placing the order.
The legal basis for processing is our legitimate interest in such processing (Art. 6 paragraph 1 sub-paragraph 1 point f GDPR). We have an interest in being able to reference your order to a specific individual and to arrange contact with the customer firm.
Data recipients
Your data are not transferred/disclosed to any third parties.
Duration of data storage
Your personal data will be stored for as long as necessary to fulfil the respective order in question. A mandatory ten-year retention period furthermore applies for business documents pursuant to § 257 of German Commercial Code (HGB) and § 147 of German Tax Code (AO); erasure takes place upon the elapse of that period.
Further advisories
You have no legal or contractual obligation to provide personal data. Failing to provide data may make fulfilling your order impossible.
No profiling takes place.
4. Marketing
AVarious marketing measures are carried out on our website. We will notify you when the processing of your personal data is necessary for such. Additionally, you will directly receive detailed information on cookies within the cookie consent tool that is displayed upon your initial visit to the website.
|
Cookie
|
Purpose
|
Storage period
|
|
kcm_data
|
Information on your choice regarding the placement of cookies (consent or refusal) is stored in this cookie.
|
90 days
|
|
matomo
|
This cookie is used to calculate visitor, session and campaign data for website analytics reports.
|
730 days
|
The legal basis for processing with regard to the “kcm_data” cookie is our legitimate interest per Art. 6 paragraph 1 sub-paragraph 1 point f GDPR. Our legitimate interest is in conforming with data protection requirements and obtaining your documented consent.
The legal basis otherwise is your consent per Art. 6 paragraph 1 sub-paragraph 1 point a GDPR.
Data recipients
Data processed in or via cookies are not transferred/disclosed to third parties.
Duration of storage, transfer
The table above lists the storage period for the respective cookies. You have the right to withdraw previously granted consent at any time without stating any reasons, with non-retrospective effect. We will then no longer process your personal data. Please note that withdrawal has no effect regarding the legality of processing prior to exercising of this right. The simplest way to withdraw consent is to delete the cookies from within your browser.
Further advisories
You have no legal or contractual obligation to provide personal data. There are no consequences for you for not providing such data.
No profiling takes place.
5. Job applications
Information on job openings is provided on our website, along with a form for directly contacting us regarding these.
Purpose of processing and legal bases
The purpose in processing your personal data in relation to job openings is to start the job application process along with the further steps involved in pursuing a potential employment relationship.
If you are hired, your data will continue to be processed in connection with commencing the employment relationship. We will inform you separately in this regard during the process.
The respective legal bases for processing are Art. 88 paragraph 1 GDPR and § 26 paragraph 1 sentence 1 of the Federal Data Protection Act (BDSG). Art. 6 paragraph 1 sub-paragraph 1 point b GDPR furthermore applies regarding steps taken prior to entering into a contract (employment contract).
Data recipients
Data collected from you in this context is not transferred/disclosed to third parties.
Duration of storage, withdrawal of consent
If you are hired after applying, your personal data are stored in your personnel file for the duration of the employment relationship.
If you are not hired, your application data are erased six months after ending of the application process. The data are retained for this period for the purpose of defending against any potential claims.
You may grant us consent (per Art. 6 paragraph 1 sub-paragraph 1 point a GDPR) to storage for a longer period to enable us to refer to your documents regarding future job openings. In such case you are able at any time to withdraw your consent with non-retrospective effect. The legality of processing up to until withdrawal is not thereby affected; no further processing takes place going forward.
Further advisories
You have no legal or contractual obligation to provide your personal data to us. Application documents are however required from you as a prerequisite for potentially entering into an employment contract. Failure to do provide such may rule out the possibility of our extending a job offer to you.
No profiling takes place.
6. Service tickets
A functionality is provided on our website enabling you to generate service tickets from the website after registering with us accordingly.
Purpose of processing and legal bases
Your personal data are processed in order to reference tickets and the information they contain directly to a specific individual and company, and to subsequently communicate with you in both directions.
The legal basis for this is our legitimate interest in processing (Art. 6 paragraph 1 sub-paragraph 1 point f GDPR), as well as your implicit consent granted by virtue of creating an account (Art. 6 paragraph 1 sub-paragraph 1 point a GDPR). We have a legitimate interest in enabling communication with a specific contact person and being able to reference service cases.
Data recipients
We host your data. In cases where you require support however your personal data may be viewed by the service provider Microsoft. A processing contract has been concluded to this end.
Duration of storage, withdrawal of consent
Data are stored for as long as necessary to process your inquiry.
You have the right to revoke previously granted consent at any time without stating any reasons, with non-retrospective effect. We will then no longer process your personal data. Please note that withdrawal has no effect regarding the legality of processing prior to exercising of this right.
Due to the legal retention periods however, storage may be required even after you withdraw consent due to the ten-year retention requirement per § 257 of German Commercial Code (HGB) and § 147 of German Tax Code.
Further advisories
You have no legal or contractual obligation to provide personal data. Failing to provide data may make fulfilling your order impossible.
No profiling takes place.
7. Newsletter
We provide a newsletter so you can keep up to date about our products and services, reading about the latest news and developments. It is necessary to process your personal data in order for you to receive this information; we thus advise you below regarding such processing.
Purpose of processing and legal bases
Your personal data are processed so that we can distribute the newsletter to you.
The legal basis for processing is your consent (Art. 6 paragraph 1 sub-paragraph 1 point a GDPR). By entering your e-mail address where requested on our website, you expressly grant such consent. You then receive an e-mail containing a confirmation link, which you must click on. Only then is your newsletter subscription request activated.
Duration of storage, withdrawal of consent
We store your personal data us for as long as your granted consent remains effective – as long as the newsletter is offered as a service.
You have the right to withdraw your consent at any time, with non-retrospective effect. We will then no longer process your personal data; the legality of processing under previous consent remains unaffected however by your notice of withdrawal. You can click on a link at the bottom of the newsletter that conveniently takes you to an uncomplicated web page where you can unsubscribe, thereby declaring withdrawal of consent.
Further advisories
You have no legal or contractual obligation to provide personal data. Failing to provide data may make it impossible for you to receive the newsletter.
No profiling takes place.
IV. Your rights
You have rights regarding processing as follows, subject to the respective conditions being met:
- The right of access to information (Art. 15 GDPR)
- The right to rectification of incorrect personal data (Art. 16 GDPR)
- The right to erasure of your personal data (Article 17 GDPR)
- The right to restriction of processing (Article 18 GDPR)
- The right to data portability (Art. 20 GDPR)
- The right to object (Art. 21 GDPR)
To exercise your rights, please contact us using the details stated above. You may also contact the Data Protection Officer directly.
You furthermore have the right to file complaint with the competent supervisory authority if you have concerns that your data may be processed in breach of applicable law.
