Privacy

Data protection - very simple

Below you will find a brief, understandable overview of the collection and processing of your data. Please refer to our data protection declaration for detailed explanations.

We collect this information:

• We use cookies. You can set your browser so that these cookies are not saved or deleted at the end of your Internet session.
• If you register for the newsletter, we save the time, the registration and the e-mail address that you provide us for this purpose. We also record when you open the newsletter and which links you click.
• The website contains specific data entry forms at various points, which can consist of mandatory fields as well as fields of different content that must be filled in voluntarily.

This is how we collect your data

We automatically collect the data that is generated when you visit our website, if necessary through the use of cookies. The same applies to the data arising from the use of the newsletter. Otherwise, we collect the data only on the basis of your entries on our website, in the respective collection forms. Wherever this is the case, you will find a link to the specific data protection notice directly on the form.

We use your data for this purpose

• For the technical administration and the provision of the website.
• In the case of special data entry forms, the exact purpose is described in the respective data protection notice.

We also use your data

• Only to the extent provided for by law
• For misuse detection and fault rectification
• To provide information to public authorities

How long do we store your data?

The duration of data storage depends primarily on the fulfilment of the purpose. This means that we store your data for exactly as long as we need it to fulfil the purpose for which it was collected. In some cases, however, there are legal retention periods which provide for a different storage period. In these cases, we store the data for as long as required by the relevant law. Should data in a special context (e.g. Google Analytics) be deleted after another period, this is stated in the detailed data protection declaration. 

You have these rights

• Right to information (you can also ask for all information in this note at any time).
• Right to erasure of data (unless time limits prevent this).
• Right to oblivion (if data has been transmitted, we must inform the recipient about the request for deletion).
• Right to data transferability (if you wish, we must transfer the data to a third party in machine-readable format).
• Right to correct the category of data.
• Right of opposition to the processing activity.
• Right to rectification if the data is incorrect.
• Right of appeal to the supervisory authority.
   

This data protection information provides a compact overview. The complete information can be found in the detailed version. In order to protect your rights and to ensure legally correct processing, we have appointed an external data protection officer. These are the contact details:

Marco Weber
gds – Gesellschaft für Datenschutz Mittelhessen mbH
datenschutz@gdsm.de
+49 6421 / 870413-10

This Privacy Notice is intended to provide information about what data we process, how we do it, and what rights you have as the data subject in the processing of this data.
 

Responsible processor:

• EWIKON Heißkanalsysteme GmbH
   

Name of processing:

• Preparation of quotation
   

We process the following categories of data:

• Personal data (contact details)
• Technical specifications
   

The following categories of persons are affected:

• Interested persons
• Customers
• Communication partners (e-mail, telephone, etc.)
   

For the following legal reasons, depending on the progress and progress of the request, we may process the data:

• Consent (Article 6 (1) (a) of the GDPR)
• Fulfillment of the contract (Article 6 (1) (b) of the GDPR)
• Legal obligations (Article 6 (1) (c) GDPR)
• Legitimate interest (Article 6 (1) (f) of the GDPR)
   

We store the data for the following period:

Within the legal retention period, this is 6 years. In the case of an order, this period may be extended to 10 years.

If your request does not come from Germany, it may be necessary to transfer your data to the country of the request to facilitate processing of the request through our subsidiaries and commercial agents. An up-to-date overview of our subsidiaries and commercial agents can be found on our website.
 

You have the following rights as an affected person in the context of this processing:

• Right to information (you can also request information at any time)
• Right to delete the data (unless there are periods of safekeeping)
• Right to be forgotten (if data has been transmitted, we must ask the recipient to delete it)
• Right to data portability (if you wish, we must transfer the data to a third party in machine-readable format)
• Right to correct the data category
• Right to object to the processing activity
• Right to correction if the data is incorrect
• Right to complain to the supervisory authority
   

In order to safeguard your rights and to ensure the legally correct processing, we have appointed an external data protection officer. These are the contact details:

Marco Weber
gds – Gesellschaft für Datenschutz Mittelhessen mbH
datenschutz@gdsm.de
+49 6421 / 870413-10

This Privacy Notice is intended to provide information about what data we process, how we do it, and what rights you have as the data subject in the processing of this data.
 

Responsible processor:

• EWIKON Heißkanalsysteme GmbH
   

Name of processing:

• Electronic invoicing
   

We process the following categories of data:

• Personal data (contact details)
   

The following categories of persons are affected:

• Customers
• Communication partners (e-mail, telephone, etc.)
   

For the following legal reasons, depending on the progress and progress of the request, we may process the data:

• Consent (Article 6 (1) (a) of the GDPR)
• Fulfillment of the contract (Article 6 (1) (b) of the GDPR)
• Legal obligations (Article 6 (1) (c) GDPR)
• Legitimate interest (Article 6 (1) (f) of the GDPR)
   

We store the data for the following period:

Within the legal retention period, this is 6 years. In the case of an order, this period may be extended to 10 years.

If your request does not come from Germany, it may be necessary to transfer your data to the country of the request to facilitate processing of the request through our subsidiaries and commercial agents. An up-to-date overview of our subsidiaries and commercial agents can be found on our website.
 

You have the following rights as an affected person in the context of this processing:

• Right to information (you can also request information at any time)
• Right to delete the data (unless there are periods of safekeeping)
• Right to be forgotten (if data has been transmitted, we must ask the recipient to delete it)
• Right to data portability (if you wish, we must transfer the data to a third party in machine-readable format)
• Right to correct the data category
• Right to object to the processing activity
• Right to correction if the data is incorrect.
• Right to complain to the supervisory authority.
   

In order to safeguard your rights and to ensure the legally correct processing, we have appointed an external data protection officer. These are the contact details:
 

Marco Weber
gds – Gesellschaft für Datenschutz Mittelhessen mbH
datenschutz@gdsm.de
+49 6421 / 870413-10

As part of the provisions of the GDPR, we inform you about the processing of your personal data

EWIKON Heißkanalsysteme GmbH
Siegener Straße 35
35066 Frankenberg

Our data protection officer is:

Marco Weber
gds – Gesellschaft für Datenschutz Mittelhessen mbH
datenschutz@gdsm.de
Tel.: 06421 804 1310

Type of data categories and source of data:

When you apply to us, we process the information that we receive from you during the application process, e.g. by letter of application, CV, certificates, correspondence, telephone or oral information. In addition to your contact details, we attach particular importance to your education, your qualification, your work experience and your abilities. We will only judge you on your suitability for the job, so you do not have to send us a photo.

Purposes and legal basis of data processing and duration of data storage:

Your data will initially be processed exclusively for the application process. If your application is successful, it will be used as part of your personal file and for the purpose of carrying out and terminating the employment relationship and will be deleted in accordance with the rules applicable to personal files. If we are currently unable to provide you with employment, we will process your data for up to six months after the cancellation has been sent in order to defend ourselves against any legal claims, in particular for alleged discrimination in the application process. To the extent you receive reimbursements or other tax-related events, the appropriate accounting records will be retained to comply with the budgetary and taxation obligations under the relevant applicable retention requirements. Our human resources department has access to your data, as well as the specialist department of the job you applied for and, if necessary, the accounting department. Our administrators and processors have the technical need to access data processed by IT. These are strictly bound by our instructions and may not process the data for their own purposes. In certain cases, we may need to disclose your personal information to third parties, such as our bank, when you receive a reimbursement or to the post office when we communicate with you by letter.

The legal basis of the data processing in the application process and as part of the personal file are § 26 Abs. 1 S. 1 BDSG and Art. 6 Section 1 lit. b GDPR and, as far as you have given your consent, for example by sending information not required for the application process, Art. 6 Section 1 lit. a GDPR. Legal basis of data processing after a cancellation is Art. 6 Section 1 lit. f GDPR. The legal basis for the domestic and tax law retention is Art. 6 Section 1 lit. c GDPR in conjunction with § 147 AO. Legitimate interest in processing on the basis of Art. 6 Section 1 lit. f GDPR is the defense against legal claims.

We generally do not need special categories of personal data in the sense of Art.9 GDPR for the application process. We ask you not to provide us with such information from the outset. If such information is exceptionally relevant to the application process, we process it together with your other applicant data. This may, for example, concern information about severe disability that you can voluntarily impose on us and which we then have to process to fulfill our specific obligations with regard to the severely disabled. In these cases, processing serves the exercise of rights or the fulfillment of legal obligations arising from employment law, social security law and social protection. The legal basis of the data processing is then Art. 9 Section. 2 lit. b GDPR, §§ 26 (3) BDSG, 164 SGB IX. By way of exception it may be necessary to obtain information about your health or disability or information from the Bundeszentralregister, i.e. about previous convictions, to assess your suitability for the intended job. Legal basis for this is § 26 BDSG.

Data transfer:

Your data will not be used by our site for automated decision making or profiling, nor shared with third parties. Your data will be processed on our behalf or exclusively through us in Germany.

You have the following rights:

• Right to information (Article 15 of the GDPR)
  You have the right to ask the persons responsible for a confirmation as to whether your personal data is being processed; If this is the case, you have a right to information about this personal data.
• Right to rectification (Article 16 of the GDPR)
  You have the right to demand from the persons responsible the correction of incorrect personal data concerning you and, if necessary, the completion of incomplete personal data without delay.
• Right to cancellation or restriction (Article 18 of the GDPR) of processing
  You have the right to demand from the persons responsible that personal data concerning you be deleted immediately, e.g. for example, if the data is no longer needed for the purposes pursued (right to delete). The data subject has the right to require those responsible to restrict processing for the duration of the review by the responsible, e.g. for example, if the data subject has objected to the processing.
• Right to objection (Article 21 of the GDPR)
  You have the right to object at any time to the processing of your personal data for reasons arising from your particular situation. The person responsible no longer processes the personal data. Unless he / she can demonstrate compelling legitimate grounds for processing that outweigh the interests, rights and freedoms of the data subject or the processing serves to assert, pursue or defend legal claims.
• Right to revocation (Article 7 (3) GDPR)
  If the processing of your personal data takes place on the basis of your consent, you have the right to revoke this consent at any time, without affecting the legality of the processing based on the consent until the revocation.
• Right to appeal to the supervisory authority (Article 77 GDPR)
  If the data subject considers that the processing of personal data concerning them is contrary to the GDPR, there is the possibility of a complaint to a supervisory authority.

The contact details of the supervisory authority responsible for the state of Hessen are as follows:

Der Hessische Beauftragte
für Datenschutz und Informationsfreiheit
Postfach 3163
65021 Wiesbaden

In addition, Art. 15 GDPR grants a right to information. According to this, persons have the right to ask the person responsible for confirming that they will process personal data. If this is the case, Article 15 Section 1 sentence 2 GDPR regulates the content of the right to information. These include:

• the purpose of the processing
• the categories of processed data
• the recipients or categories of recipients to whom the data will be disclosed
• the duration of the storage of the data or the criteria for determining this duration