Data protection
a) Introduction
We take the protection of your data very seriously and adhere strictly to the applicable data protection laws. Personal data is only collected on this website to the extent necessary for technical and organizational reasons. The following statement gives you an overview of how we guarantee the protection of your personal data and what type of data is collected for what purpose. To ensure the security of your data during the transfer process, we also use state-of-the-art SSL/TLS encryption procedures.
b) Responsible body, data protection officer
Name and address of the person responsible
Managing director authorized to represent the company: Nikolaus Kerssenbrock
Petek Cleanroom Technology GmbH
Wilhelm-Moriell-Str. 10
D – 78315 Radolfzell
Data Protection Officer
If you have any questions or require information, you can contact our external data protection officer at any time:
Oliver Offenburger, M.Sc.
eye-i4 GmbH – Data protection department
Mönchweilerstrasse 12
78048 Villingen-Schwenningen
Phone: 07721 69724 00
Fax: 07721 69724 01
Web: https://eye-i4.de
Our preferred method of contact is e-mail. You can contact the data protection officer but you are also welcome to contact us by post or telephone. If you send us a request by e-mail within regular business hours, we will confirm receipt of the message on the same day. If you do not receive a confirmation, please contact us by telephone.
Encryption of emails to our data protection officer
We are advocates of encrypted transmission by e-mail. We therefore offer you the option of encrypting your inquiries to the data protection officer to ensure confidentiality and integrity. We use PGP for encryption. If you have any further questions about encryption, please contact our data protection officer.
c) General information on data processing
Scope of the processing of personal data
We only process our users’ personal data to the extent necessary to provide a functional website and our content and services. The processing of personal data of our users takes place regularly only with the consent of the user. An exception applies in cases where prior consent cannot be obtained for factual reasons and the processing of the data is permitted by law.
Legal basis for the processing of personal data
Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a EU General Data Protection Regulation (GDPR) serves as the legal basis. In the processing of personal data necessary for the performance of a contract to which the data subject is party, Art. 6 para. 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures. Insofar as the processing of personal data is required to fulfill a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis. In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis. If the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 para. 1 lit. f GDPR serves as the legal basis for processing.
Data erasure and storage duration
The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Data may also be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.
d) Hosting and creation of log files
Hosting
This website is operated on a server of Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Germany) in the Nuremberg data centre, Germany. The server is administered on our behalf by Syrcon GmbH (Torstraße 33, 10119 Berlin, Germany), which also handles the technical evaluation of the audience measurement described below. Data processing agreements pursuant to Art. 28 GDPR are in place with both service providers. All data collected on this website is stored exclusively on this server in Germany. The legal basis is our legitimate interest in the secure and efficient provision of our online services (Art. 6 para. 1 lit. f GDPR).
Description and scope of data processing
Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer. The following data is collected: domain, IP address of the accessing computer, timestamp, request line, status code, size of the response body, referer sent by the client, and the user agent (browser and operating system). This data is not stored together with other personal data of the user.
Legal basis / Purpose / Duration of storage
The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f GDPR. The IP address is stored in log files to ensure the functionality of the website, to optimize the website and to ensure the security of our information technology systems. If the data is stored in log files, deletion takes place after 90 days at the latest. The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website; consequently, there is no possibility for the user to object.
Audience measurement (own, cookie-free statistics)
For statistical analysis of the use of our website we operate our own audience measurement on our server. When a page is opened, your browser transmits to our server the page accessed, the previously visited page (referrer), the page title, browser type and version, language setting, screen resolution and your IP address. No cookies are set, no user profiles are created and no data is passed on to advertising networks. For a rough geographical classification and to detect automated access, the IP address is matched to an approximate location and network operator via the service ip-api.com; individual persons are not identified. The legal basis is our legitimate interest in statistical evaluation and in the security of our website (Art. 6 para. 1 lit. f GDPR). The data is stored on our server in Germany and automatically deleted after 90 days at the latest. You may object to this collection at any time with effect for the future (see contact details above).
e) Contact by e-mail and contact form
There is a contact form on our website. It does not transmit any data to our server; instead it opens an e-mail in your own e-mail program containing the details you entered (name, e-mail address, telephone number, message), which you then send to us yourself. You may also contact us directly by e-mail.
We process the personal data transmitted with the e-mail exclusively to handle your enquiry. The legal basis is Art. 6 para. 1 lit. b GDPR (pre-contractual measures or performance of a contract), otherwise Art. 6 para. 1 lit. f GDPR (legitimate interest in answering your enquiry). The data is deleted as soon as the conversation with you has ended and no statutory retention obligations apply.
f) Applications
We accept applications for our job vacancies by e-mail; the links on our career pages open a prepared e-mail in your e-mail program. We process the data submitted (e.g. name, contact details, CV, certificates) exclusively for the purpose of the application procedure. The legal basis is Section 26 of the German Federal Data Protection Act (BDSG) in conjunction with Art. 6 para. 1 lit. b GDPR. The data is deleted no later than six months after completion of the application procedure, unless you have consented to longer storage.
g) Third-party services and disclosure of personal data
No third-party services are embedded on our website – in particular no external fonts, analytics, tracking or consent management services. Fonts and icons are delivered from our own server. Accessing our website therefore does not establish a connection to third-party servers.
Personal data is disclosed to third parties only to the extent described in this policy, where you have given your consent, or where we are legally obliged to do so. Our website is operated on a server in Germany.
h) Cookies
Our website does not use cookies and does not store data in your browser’s local storage. Consent to cookies is therefore not required.
i) Rights of the data subject
Right to information
You can request confirmation from the controller as to whether personal data concerning you is being processed by us. If such processing has taken place, you can request information about: the purposes for which the personal data are processed; the categories of personal data that are processed; the recipients or categories of recipients; the planned duration of storage; the existence of a right to rectification or erasure, to restriction of processing or to object; the existence of a right of appeal to a supervisory authority; information about the origin of the data; and the existence of automated decision-making, including profiling, in accordance with Art. 22 para. 1 and 4 GDPR.
Right to rectification
You have a right to rectification and/or completion vis-à-vis the controller if the processed personal data concerning you is incorrect or incomplete. The controller must make the correction immediately.
Right to restriction of processing
You may request the restriction of the processing of your personal data under the conditions set out in Art. 18 GDPR. If the restriction of processing applies, this data — apart from its storage — may only be processed with your consent or for the establishment, exercise or defense of legal claims.
Right to erasure
You have the right to obtain from the controller the erasure of personal data concerning you without undue delay where one of the grounds set out in Art. 17 GDPR applies (e.g. the data is no longer necessary, the consent is revoked, or the processing is unlawful). The right to erasure does not exist in the exceptional cases set out in Art. 17 para. 3 GDPR.
Right to information (disclosure to recipients)
If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller is obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort.
Right to data portability
You have the right to receive the personal data concerning you, which you have provided to the controller, in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller without hindrance.
Right of objection
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Art. 6 para. 1 lit. e or f GDPR; this also applies to profiling based on these provisions. If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing.
Right to revoke the declaration of consent under data protection law
You have the right to revoke your declaration of consent under data protection law at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
Automated decision in individual cases including profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. Exceptions apply where the decision is necessary for the conclusion or performance of a contract, is authorized by law, or is made with your express consent.
Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.