Privacy Policy

Thank you for visiting our website and your interest in our company. We would like to inform you briefly about Elma's data protection policies.

§ 1 - Name and address of the data controller

The data controller under Art. 4 (7) of the EU General Data Protection Regulation (referred to below as: “GDPR”) and other national data protection laws of the member states and other provisions of data protection law is:

Elma Schmidbauer GmbH
Gottlieb-Daimler-Strasse 17
78224 Singen
Germany

+49 7731 882-0
privacy@remove-this.elma-ultrasonic.com

For further information see Legal Disclosure.
 

§2 - Contact details of the data protection officer

The data protection officer of the data controller can be contacted via:

privacy@remove-this.elma-ultrasonic.com

 

§3 - General information on data processing

1. Scope of processing of personal data

We will only ever process personal data to the extent necessary for the functionality of our website and for the provision of our contents and services. No regular processing of personal data takes place unless you have given your consent as user. An exception applies in those cases where obtaining prior consent is not possible for factual reasons and the processing of the data is permitted by statutory regulations.

2. Legal basis for the processing of personal data

If we obtain your consent for the processing of personal data, the legal basis for this is Art. 6 (1) a) GDPR.

In the case of the processing of personal data that is required for the performance of a contract to which you are party, the legal basis for this is Art. 6 (1) b) GDPR. This also applies to processing operations required for the implementation of pre-contractual measures. The processing of data in connection with an application procedure (i.e. for the decision on the establishment of an employment relationship) is based on Art. 88 (1) DSGVO in conjunction with Art. 26 (1) sentence 1, (8) sentence 2 BDSG (Federal Data Protection Act).

If the processing of your personal data is required for compliance with a legal obligation to which our company is subject, the legal basis for this is Art. 6 (1) c) GDPR.

Art. 6 (1) sentence 1 d) GDPR serves as a legal basis in cases where processing is necessary in order to protect your vital interests or the vital interests of another natural person.

If the processing is required to safeguard a legitimate interest of our company or a third party, and your interests and fundamental rights and freedoms do not override our legitimate interest as first stated, the legal basis for processing is Art. 6 (1) f) GDPR.

3. Transfer of personal data to third parties

Your personal data is not transferred to third parties for purposes other than those listed below. We only share your personal data with third parties if
your express consent has been obtained under Art. 6 (1) sentence 1 a) GDPR,

  • this is required under Art. 6 (1) sentence 1 b) GDPR for the performance of a contract to which you are party,
  • sharing such data is required under Art. 6 (1) sentence 1 c) GDPR for compliance with a legal obligation or
  • sharing such data is required under Art. 6 (1) sentence 1 f) GDPR to safeguard a legitimate interest of our company, and your interests and fundamental rights and freedoms do not override our legitimate interest as first stated.
  • We sometimes use external service providers as commissioned data processors for the processing of your data. We select and appoint these carefully, and they are bound by our instructions and are regularly monitored.

4. Deletion of data and duration of storage

Your personal data is deleted or blocked as soon as the purpose of storage no longer exists. It may be stored for a longer period if this is stipulated by European or national legislators in regulations, laws or other provisions under EU law to which the data controller is subject. The data is also blocked or deleted if the period of storage specified by the standards referred to expires, unless there is a requirement for a longer storage period for the data for the conclusion or performance of a contract.
 

§4 - Your rights

If your personal data is processed, you are the data subject in the meaning of the GDPR and have the following rights with regard to us relating to the personal data that concerns you:

1. Right to receive information

You may require us to provide confirmation of whether personal data concerning you is being processed by us. If such processing is taking place, you may require us to disclose the following information:

  1. the purposes for which your personal data is being processed;
  2. the categories of personal data which are being processed;
  3. the recipients or categories of recipients to whom personal data concerning you has been or is being disclosed;
  4. the planned duration of storage of your personal data or criteria for the stipulation of duration of storage if no specific information can be provided in this regard;
  5. the existence of a right to rectification or deletion of your personal data, of a right to restriction of processing by the data controller and of the right to object to such processing
  6. the existence of a right to lodge a complaint with a supervisory authority;
  7. all available information regarding the origin of data, if the personal data has not been collected from the data subject;
  8. the existence of automated individual decision-making, including profiling pursuant to Art. 22 (1) and (4) GDPR and – at least in such cases – meaningful information on the logic and scope involved and on the intended effects of processing of this nature for you.

You have the right to require information on whether your personal data is transferred to a third country or international organisation. Within this context, you may require information on appropriate safeguards pursuant to Art. 46 GDPR in connection with such a transfer of data.

2. Right to rectification

You have a right of rectification and/or of completion vis-à-vis us insofar as your personal data being processed is inaccurate or incomplete. We are required to make corrections without undue delay.

3. Right to restriction of processing

You may require restriction of processing of your personal data if the following prerequisites apply:

  • You contest the accuracy of your personal data for a period of time which enables us to verify the correctness of the personal data.
  • Processing is unlawful, and you reject deletion of personal data and require restriction of processing of personal data instead.
  • We no longer require data for the purposes of processing, but you still need this data for the establishment, exercise or defence of legal claims.
  • You have objected to processing pursuant to Art. 21 (1) GDPR, and it has not yet been ascertained if the legitimate grounds for processing on our part overrides your grounds.

If processing of your personal data has been restricted, such data may then – storage aside – only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of rights of another natural or legal person or for reasons relating to an important public interest of the Union or of a Member State.

If restriction of processing has been applied on the basis of the prerequisites listed above, you will be notified by us before the restriction is lifted.

4. Right to deletion

a) Duty to delete

You may require us to delete personal data concerning you without undue delay, and we will be required to delete such data without undue delay insofar as one of the following grounds apply:

  1. Your personal data is no longer necessary for the purposes for which it was collected or was otherwise being stored.
  2. You withdraw your consent for the lawfulness of processing pursuant to Art. 6 (1) sentence 1 a) or Art. 9 (2) a) GDPR, and there is no other legal basis via which processing may take place.
  3. You object to the processing of data pursuant to Art. 21 (1) or (2) GDPR, and no overriding legitimate grounds for processing are in place, or you object to processing pursuant to Art. 21 (2) GDPR.
  4. Your personal data has been processed unlawfully.
  5. Deletion of your data is necessary for compliance with a legal obligation in accordance with European Union Law or the laws of a Member State to which the controller is subject.
  6. Your personal data was collected in relation to the offer of information society services within the meaning of Art. 8 (1) GDPR.

b) Information to third parties

If we have made your personal data public and are under an obligation to erase personal data pursuant to Art. 17 (1) GDPR, we will take available technology and implementation costs into account in instigating suitable measures, including of a technical nature, to notify controllers processing the personal data that you in your capacity as a data subject have requested deletion of all links to this personal data or of copies or reproductions of this personal data.

c) Exceptions

Right of deletion does not apply to the extent that processing is necessary for the following reasons:

  1. Exercising the right of freedom of expression and information.
  2. Compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
  3. Public interest in the area of public health in accordance with points (h) and (i) of Art. 9 (2) h) and i) and Art. 9 (3) GDPR.
  4. Archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Art. 89 (1) GDPR insofar as the right referred to in section a) is likely to render impossible or seriously impair the achievement of the objectives of such processing.
  5. Establishment, exercise or defence of legal claims.

5. Right to notification

In the event that you have asserted a right to rectification, deletion or restriction of processing against us, we will be required to notify this rectification, deletion or restriction to all recipients to whom personal data concerning you was disclosed unless such a procedure would involve disproportionate effort.

You have the right vis-à-vis us to be notified of these recipients.

6. Right to data portability

You have the right to receive personal data which you have provided to us in a structured, commonly used and machine-readable format. You further have the right to transmit such data to another controller without hindrance from the controller to which the personal data has been provided insofar as the following provisos apply:

  1. Processing is based on consent pursuant to point (a) of Art. 6 (1) sentence 1 a) GDPR or Art. 9 (2) a) GDPR or on a contract pursuant to Art. 6 (1) sentence 1 b) GDPR.
  2. Processing is carried out by automated means.

In exercising this right, you have the further right to have the personal data transmitted directly from one controller to another where this is technically feasible. This right must not adversely affect the rights and freedoms of others.

The right to data portability does not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

7. Right to object

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Art. 6 (1) sentence 1 e) or f) GDPR, including profiling based on these provisions.

We will then no longer process your personal data unless we are able to demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or unless processing takes place for the purpose of establishment, exercise or defence of legal claims.

Where your personal data is processed for direct marketing purposes, you will have the right to object at any time to the processing of personal data concerning you for such marketing. This also includes profiling to the extent that this is related to such direct marketing.

Where you object to processing for direct marketing purposes, your personal data will no longer be processed for such purposes.

Within the context of the use of information society services and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means and by using technical specifications.

8. Right to withdraw a declaration of consent made under data protection law

You have the right at any time to withdraw a declaration of consent made under data protection law. Withdrawal of consent is without prejudice to the lawfulness of the processing that has taken place on the basis of consent until such time this consent was withdrawn.

9. Automated individual decision-making, including profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or else similarly significantly affects you. This does not apply in the following circumstances:

  1. The decision is necessary for conclusion or performance of a contract between you and the data controller.
  2. The decision is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests.
  3. The decision is based on your explicit consent.

Notwithstanding this, such decisions must not be based on special categories of personal data referred to in Art. 9 (1) GDPR unless Art. 9 (2) a) or b) GDPR applies and suitable measures to safeguard your rights and freedoms and legitimate interests are in place.

With regard to the cases 1 and 3 above, we will implement suitable measures to safeguard your rights, and freedoms and legitimate interests, whereby these at least comprise the right to obtain human intervention on the part of the controller, the right to express your point of view and the right to contest the decision.

10. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data concerning you infringes the GDPR.

The supervisory authority with which the complaint has been lodged will inform you in your capacity as complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Art. 78 GDPR.
 

§5 - Hosting

The website is hosted on the servers of a service provider engaged by us.

The servers automatically collect and store information in so-called server log files. This data is automatically transmitted by your browser when you visit the website. The types of information stored are as follows:

  • Browser type and browser version
  • Operating system used
  • Referrer URL
  • Host name of the computer via which the site is accessed
  • Date and time of the server request
  • IP address

This data is not collated with other data sources. Collection of such data takes place on the basis of Art. 6 (1) sentence 1 f) GDPR. The website operator has a legitimate interest in ensuring that the website can be displayed without technical error and can be enhanced. Server log files need to be processed for this purpose.

The geographical location of the website servers is in Germany.
 

§6 - Provision of the website / Creation of log files

1. Description, purpose and legal basis of the data processing

Every time someone visits our website, our system automatically records data and information from the computer system of the computer accessing it. The following data is collected in the process:

  • Browser type
  • Operating system
  • Internet service provider
  • IP address (anonymised – final two bytes are omitted)
  • Date and time of access
  • Websites from which the system of the user arrives on our website
  • Websites which were accessed by the system of the user via our website
  • Content of pages accessed
  • Search text entered on our website
  • Data quantity transmitted

The data is also stored in the log files of our system. This data is not stored together with other personal data.

The legal basis for the temporary storage of the data and the log files is Art. 6 (1) f) GDPR.

Temporary storage of the IP address by the system is necessary to allow our website to send information to your computer. Your IP address must be stored for this purpose for the duration of the session.

Log files are stored to ensure the functionality of our website. We also use the data to improve our website and ensure the security of our IT systems. The data is not analysed for marketing purposes in this context.

The legal basis for the temporary storage of the data and the log files is our predominant legitimate interest in secure and technically flawless site operation, Art. 6 (1) sentence 1 f) GDPR.

2. Duration of storage, right to objection and removal

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected.

If the data is recorded for the provision of our website, this is the case when the session concerned ends. If the data is stored in log files, this is the case no later than after 14 days. However, a longer period of storage is possible. In this case your IP address is deleted or disguised so that it can no longer be allocated to the client accessing it. The search text you enter is not deleted but used to improve our website and is deleted after no more than 180 days.

The recording of the data and the storage of your data in log files are absolutely essential for the provision and operation of our website respectively. You (the user) consequently do not have the option of objecting.
 

§7 - Use of cookies

1. Description, purpose and legal basis of the data processing

Our website uses cookies. Cookies are text files that are stored in or by the web browser on the user's computer system. A cookie can be stored on your operating system when you access a website. This cookie contains a distinctive sequence of characters, the so-called “session ID”, that makes it possible for the browser to be clearly identified when the user visits the website once more.

We use cookies to make our website more user-friendly. Some elements of our website require that the web browser accessing it can also be identified after a page change.

The following data is stored and transmitted in the cookies:

  • Log-in information
  • Consent settings (Cookie Consent Manager)

On our website, we also use cookies which permit an analysis of users’ surfing behaviour to be carried out.

The following data may be transmitted in this respect:

  • Search terms entered
  • Frequency of page views
  • Utilisation of website functions

Technical arrangements have been put in place to pseudonymise data which is collected from you in this way. This means that the data can no longer be attributed to you as the accessing user. Such data is not stored together with other personal data.

The purpose of the use of technically essential cookies is to make it easier for you to use the websites. Some functions of our website, e.g. accessing the Partner Area, cannot be provided without the use of cookies. For such functions it is necessary for the web browser to be recognised again after a page change.

We need cookies for the following applications:

  • Saving of settings in the Cookie Consent Manager
  • Web analysis via Matomo/Google Analytics
  • Identification of users following log-on to the Elma Partner Area

The user data collected by technically essential cookies is not used for the creation of user profiles.

Analysis cookies are used for the purpose of improving the quality of our website and its contents. Analysis cookies enable us to learn how the website is being used. This allows us to optimise our service on an ongoing basis.

The legal basis for the processing of personal data using cookies is our legitimate predominant interest in legally compliant, secure and technically flawless site operation, Art. 6 (1) sentence 1 a) GDPR (insofar as our Klaro ! consent management tool is concerned - cf. our comments below - ) or in all other cases your consent, Art. 6 (1) sentence 1 f) GDPR.

2. Duration of storage, right to objection and removal

Cookies are stored on your computer and transmitted by it to us. You as the user therefore also have complete control over the use of cookies. You can deactivate or restrict transmission from cookies by changing the settings in your web browser. Cookies already stored can be deleted at any time. This may also happen automatically. If cookies are deactivated for our website, it may no longer be possible to use all the functions of the website completely.
 

§8 - Use of data for administration of consent via Klaro!

1. Description, purpose and legal basis of the data processing

Our website uses the Klaro! Cookie Consent Manager (KIProtect GmbH, Bismarckstr. 10-12, 10625 Berlin) to obtain your consent for storage of certain cookies on your end device and to document these in accordance with data protection requirements. For this purpose, Klaro! stores a cookie in your browser in order to be able to allocate consent agreements or withdrawals of consent.

The use of Klaro! is based on our legitimate interest in using a technology by means of which we can obtain the legally required consent for the use of cookies.

The legal basis for this is our legitimate predominant interest in legally compliant site operation (consent management), Art. 6 (1) sentence 1 f) GDPR.

2. Duration of storage, right to objection and removal

Data collected in this way is stored until you request deletion by us, until you delete the Klaro! cookie itself or until the purpose of data storage no longer applies. This is without prejudice to mandatory statutory duties of retention.

You may manage your consent for data processing by using the Klaro! Consent Manager here.
 

§9 - Use of Matomo for web analysis

1. Description, purpose and legal basis of the data processing

We use the open source software tool Matomo (formerly PIWIK) on our website to analyse the surfing behaviour of our users. The software places a cookie on your computer (for cookies see above). If individual pages of our website are accessed, the following data is stored:

  • two bytes of the IP address of the user's system accessing it,
  • browser,
  • monitor resolution,
  • operating system and its interface,
  • country, derived from the original IP address of the user's system accessing it, and
  • search terms entered.

In so doing, the software runs solely on our website's servers. Your personal data is not stored. The above data is not shared with third parties or linked to the form data.

The software is set up in such a way that the complete IP addresses are not stored, but 2 bytes of the IP address are masked (e.g. 192.168.xxx.xxx). This way it is not possible to allocate the abbreviated IP address to the computer accessing it.

The Matomo cookies are stored on your computer and transmitted by it to us. You can find further details and information about cookies in § 4 of this Privacy Policy.

The processing of your personal data makes it possible for us to analyse your surfing behaviour. By analysing the data obtained we are able to compile information about the use of the individual components of our website. This helps us to make continuous improvements to our website and make it more user-friendly. Our legitimate interest in the processing of the data for these purposes is also based on Art. 6 (1) f) GDPR. Your interest in protecting your personal data is sufficiently met by anonymising the IP address.

The legal basis for the processing of your personal data in this respect is your consent, Art. 6 (1) a) GDPR.

2. Duration of storage, right to objection and removal

The data is deleted as soon as it is no longer required for our recording purposes. This is the case here after 180 days.

We provide the possibility of opting-out (option of objecting) from the analytical process on our website. You can deactivate the collection of data via Matomo here. This way a further cookie is placed on your system that signals to our system not to store your data. If you delete the relevant cookie from your own system in the interim, you must place the opt-out cookie once more.

You can find more detailed information on the Matomo privacy settings under the following link https://matomo.org/docs/privacy/.
 

§10 - Use of Google Analytics for web analysis

1. Description, purpose and legal basis of the data processing

Our website uses Google Analytics (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA and its representative in the European Union Google Ireland Ltd., Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland) for the statistical evaluation of user access. Google Analytics uses cookies (see Section 6 of the present Privacy Policy above), which facilitate an analysis of the use of our website.

Our purpose in using web analysis is to improve the quality of our websites and their contents.

The data processing in this context is based on your consent, Art. 6 (1) a GDPR. We have a legitimate interest in analysing your behaviour as a user of our website in order to optimise our websites. Insofar as information is transferred to Google servers in the USA and stored there, an appropriate level of data protection is ensured via EU standard contractual clauses on data protection together with additional suitable guarantees.

2. Duration of storage, right to objection and removal

You can technically prevent web analysis by deactivating JavaScript and cookies in your web browser. Details regarding the necessary settings are available in the product descriptions or in the instructions of various browser providers. You can also prevent data processing via Google by using a browser add-on for the deactivation of Google Analytics. Further information and the add-on are available at https://tools.google.com/dlpage/gaoptout?hl=de. You can use the following link to deactivate use of your personal data by Google: https://adssettings.google.de.

We have activated the IP anonymisation function on our websites. This means that, within Member States of the European Union or in other states which are parties to the Agreement on the European Economic Area, your IP address will be truncated by Google prior to transmission to the USA. In exceptional cases only, the full IP address of a user will be transferred to a Google server in the USA and truncated there. A user IP address transmitted will not be collated with other Google data. For further information on Terms and Conditions of Use and privacy policies at Google Analytics, please visit https://www.google.com/analytics/terms/de.html or https://www.google.de/intl/de/policies/.

You may manage your consent for data processing by using the Klaro! Consent Manager here.
 

§11 - Use of Leadinfo for Web Analysis

1. Description, purpose and legal basis of data processing

Our website uses Leadinfo (Leadinfo/Team.Blue GmbH, Bunsenstraße 19, 40215 Düsseldorf, Germany) for statistical analysis of B2B user accesses and shows us company names and addresses based on the IP addresses of website visitors.

Leadinfo uses cookies (see point 7 of this data protection declaration), which enable an analysis of the use of our website.

The purpose of web analysis is to improve the quality of our website and to design our content in a more target group-oriented manner.

The data processing in this context is based on your consent, Art. 6 (1) a GDPR. The data processing takes place exclusively in European data centres.

2. Duration of storage, possibility of objection and removal

The collected IP addresses are only stored for the duration of the link and deleted after use.

You can technically prevent web analysis by deactivating JavaScript and cookies in your web browser. Details of the settings required for this can be found in the product descriptions or instructions of the various browser providers. You can also prevent Leadinfo from processing your data by logging out of data processing on the https://www.leadinfo.com/en/opt-out/ website.

 

§12 - Use of Google AdWords

We use Google AdWords (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA and its representative in the European Union Google Ireland Ltd., Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland) on the basis of your consent, Art. 6 (1) a GDPR, for the placement of advertisements. Google places a cookie on your computer. This can be used to store and evaluate personal data relating to the following.

  • Activities (in particular which sites have been visited and which elements have been clicked)
  • Device and browser information (in particular IP address and operating system)
  • Data on advertisements shown (in particular which advertisements were displayed and whether the user clicked on them)
  • Data from advertising partners (in particular pseudonymised user ID’s)

We only learn about the total number of users who have reacted to our advertisement. No information that would enable us to identify you is passed on. The purpose of use is not to trace users.

Data may be transmitted to servers in the USA. In this respect, Google operates on the basis of EU standard contractual clauses on data protection.
For more information on processing of data by Google, please visit: https://policies.google.com/privacy?gl=DE&hl=de.

 

§13 - Contact form / Contact by email

1. Description, purpose and legal basis of the data processing

Our website contains several contact forms which can be used to get in touch with us electronically. If you make use of this opportunity, data entered into the input screen will be transmitted to and stored by us. The following data will be stored at the time when the message is sent (insofar as collected and entered into the contact form):

  • Name
  • Company name
  • Telephone number
  • Email address
  • Country
  • Industry and
  • Product

The following data is also stored at the time the contact form is sent:

  • Date and time the contact form is sent

Your consent to processing of the data is obtained during the procedure for sending the message. Reference is made in this regard to the present Privacy Policy.

The above data is used solely for communicating with you. It may sometimes be necessary for us to share your enquiry or data with the trade partner responsible for you which may have its registered office in a country outside the European Economic Area (EEA). You must consent to the sharing of this data in the course of contacting us via the contact form provided.

Alternatively, you can also contact us via the email address provided. In that case, your personal data transmitted with the email is stored and, where necessary, may also be shared with the trade partner responsible for you.

The processing of data from the contact form and your email is used solely for processing the contact or your enquiry; the necessary legitimate interest in processing the data is also based on this.

The other personal data processed during the transmission process is used to prevent misuse of the contact form and ensure the security of our IT systems.

The legal basis for the processing of the data sent via the contact form or in the course of sending an email is Art. 6 (1) f) GDPR. If the purpose of contact is the conclusion of a contract, the additional legal basis for processing is Art. 6 (1) b) GDPR.

2. Duration of storage, right to objection and removal

The data is deleted as soon as it is no longer required for the purpose for which it was collected. This also applies to personal data from the input screen of the contact form and personal data which has been sent by e-mail once the respective conversation/enquiry with you has been concluded. A conversation/enquiry is deemed to be concluded if circumstances show that the relevant issue has been finally clarified.

The additional personal data collected during the procedure for sending the message will be deleted after a period of fourteen days.

You may withdraw your consent for processing of your personal data at any time. If you use the contact form to get in touch with us, you may object to the storage of your personal data via privacy@remove-this.elma-ultrasonic.com at any time. The processing of your enquiry cannot be continued in such a case. In this instance, all personal data stored as part of the contact procedure will be deleted.

 

§14a - Applications via e-mail

1. Description, purpose and legal basis of the data processing

You may send us your application by e-mail. We will record you e-mail address and the data provided by you in the e-mail. This data may include the following:

  • Title,
  • First name,
  • Name,
  • Address,
  • Telephone number/mobile number,
  • E-mail address,
  • Salary expectation,
  • Information regarding eductaion and training
  • Language knowledge
  • Curriculum vitae
  • Certificates
  • Photo

We use personal data from your application e-mail for the sole purpose of processing your application.

The legal basis for the processing of your data is to take steps at the request of the data subject prior to entering into a contract in accordance with Article 6 (1) sentence 1 b) and § 26 (1) sentence 1 German Data Protection Act (BDSG).

2. Duration of storage, right to objection and removal

Data will be stored for up to six months following conclusion of the application process. Your data will be deleted after the end of this six-month period. In the event of a legal obligation or if you give us your consent to do so (e.g. applicant pool), the data may be stored for a different period of time within the framework of the valid regulations.

You may object to the processing of your personal data at any time. If you contact us about an application by e-mail, you may object to the storage of your personal data via privacy@remove-this.elma-ultrasonic.com at any time. The processing of your application enquiry cannot be continued in such a case. This means that we will be unable to consider your application any further. In this instance, all personal data stored as part of the contact procedure will be deleted.

 

§14b - Applications via our job portal, applicant pool or job alert

1. Description, purpose and legal basis of the data processing

On our job portal, we provide you with an applicant form with each job advertisement, which you can use to transmit your application to us in encrypted form. If you use this form, it is necessary for you to provide the following mandatory information so that we can process your application:

  • Title,
  • First and last name,
  • Address,
  • Telephone number
  • E-mail address,
  • Earliest possible entry date

You can also voluntarily provide information on:

  • Marital status
  • Date of birth
  • Nationality
  • Mobile phone number
  • How you heard about us
  • Willingness to move
  • Period of notice
  • Salary expectation
  • School leaving certificate/ university degree
  • School career/ university career
  • Grades in key subjects
  • Work experience/ practical experience(s)
  • Other skills (e.g. driver's licence, knowledge of the Internet, MS Office)
  • Your own additional information of any kind.

You can also voluntarily upload the following types of attachments:

  • Cover letter
  • Curriculum vitae
  • Certificates
  • Photo of yourself
  • Other documents of your choice.

Please note that we may not be able to process your application if you do not provide all or any of the information marked as mandatory. If you only provide us with the mandatory information, you will not be disadvantaged in the application process.

Independent of the individual online application, there is the possibility of being included in our applicant pool. Participation in the applicant pool only takes place with your consent, which you give when sending the application documents and which you can revoke at any time at privacy@remove-this.elma-ultrasonic.com. The consent allows our HR department to access your applicant data even beyond the specific application procedure and for a maximum period of 12 months in total after receipt of your application in order to check them for adequate job vacancies. The check is carried out manually and not by means of automated individual case decisions or profiling. In the event of an adequate job advertisement, you may be contacted by Elma. You are then free to decide whether you want to apply for this position and thus a new application procedure will be initiated for which the same criteria apply.

Furthermore, you have the option of registering for a notification (job alert) of job offers from Elma (consent in accordance with Art. 6 (1) sentence 1 a) GDPR). For this purpose, an e-mail address is requested from you and a confirmation e-mail is sent. The notification function is activated after confirmation of the activation link in the email. You can unsubscribe from the Job Alert at any time - a deactivation link can be found in every Job Alert. Alternatively, you can contact us at privacy@elma-ultrsonic.com. Job Alert and applicant pool are not connected to each other.

2. Duration of storage, right to objection and removal

Data will be stored for up to six months following conclusion of the application process. Your data will be deleted after the end of this six-month period. In the event of a legal obligation or if you give us your consent to do so (e.g. applicant pool), the data may be stored for a different period of time within the framework of the valid regulations.

You may object to the processing of your personal data at any time. If you contact us about an application by e-mail, you may object to the storage of your personal data via privacy@remove-this.elma-ultrasonic.com at any time. The processing of your application enquiry cannot be continued in such a case. This means that we will be unable to consider your application any further. In this instance, all personal data stored as part of the contact procedure will be deleted.

 

§15 - Application via personnel consultants

Elma may also engage personnel consultants for the acquisition of suitable applicants. In this case, applicant data is transmitted to us by the personnel consultant in accordance with the legal basis in the relationship between the applicant and the personnel consultant (i.e. generally either on the basis of your consent vis-à-vis the personnel consultant or on the basis of a contract between the applicant and the personnel consultant). The transmission usually takes place electronically, i.e. via e-mail. Up to and including the transmission, the personnel consultant is responsible for the processing of your applicant data. After the applicant data has been transmitted to Elma, it will be processed for the recruitment decision and, if applicable, the establishment of an employment contract as described in paragraph 13.

If you are proposed to us by the personnel consultant for a job advertisement and are also hired, your data may be processed for the calculation and payment of commissions to the personnel consultant.

The legal basis for the processing of your data by Elma is Article 6 (1) sentence 1 b) GPDR and Section 26 (1) sentence 1 BDSG (decision on a contract initiation made at the request of the data subject). For information on data processing by a personnel consultant with whom you work, please contact your personnel consultant.

 

§16 - Partner Area

1. Description, purpose and legal basis of the data processing

We offer our service and distribution partners which have the relevant identification/legitimisation the option of logging into our Partner Area. In the Partner Area our service and distribution partners can view and download product information and documents. The following data is processed when the Partner Area is used:

  • Company name,
  • First and last name,
  • Customer number,
  • Email address and
  • Telephone number.

The following data is also stored at the time a document is downloaded:

  • the user's IP address,
  • date and time of the download.

Independent registration on our website for the Partner Area is not possible. Enquiries regarding registration in the Elma Partner Area are initially made to Elma by e-mail and at the request of a service or sales partner. Elma then scrutinises the application. Elma will set up an account for the service or sales partner as part of the registration process. The service or sales partner will subsequently need to activate and authorise this account. The above data is not shared with third parties.

Registration of the user is necessary for the fulfilment of a contract with our service and sales partners or for the implementation of pre-contractual measures.

If consent of the user is in place, the legal basis for processing of the data is Art. 6 (1) sentence 1 a) GDPR. Art. 6 (1) sentence 1 b) GDPR forms an additional legal basis in cases where registration takes place for the purpose of performance of a contract to which the user is party or takes place for the purpose of implementation of pre-contractual measures.

2. Duration of storage, right to objection and removal

This data is deleted as soon as it is no longer required to achieve the purpose for which it was collected.

This also applies to data collected during the registration procedure for the purpose of performance of a contract or for the implementation of pre-contractual measures if data is no longer required for implementation of the contract. Even if a contract has been concluded, there may be a need to store personal data of the contractual partner in order to meet contractual or statutory obligations in particular, retention obligations under tax law or commercial law, which can be up to ten years, but also the consideration of statutes of limitation, whereby the standard statute of limitation is 3 years and individual statutes of limitation can require storage for up to 30 years.

In their capacity as users, service and sales partners may cancel registration at any time. You may arrange for the amendment of personal data stored about you at any time.

You can withdraw your consent for the processing of your data for access to the Partner Area at any time. Please contact the data controller specified in § 1 above or send an email to this effect to privacy@remove-this.elma-ultrasonic.com. If you withdraw your consent, your access to the Partner Area is blocked and you can no longer access product information and documents in the Partner Area.

If data is required for performance of a contract or for the implementation of pre-contractual measures, premature deletion of the data will only be possible if such deletion is not prevented by contractual or statutory obligations.

 

§17 - Social media – company presence

Our company social media presence encompasses information on and about our products and services and information about various aspects of our company. Every user is free to publish personal data by undertaking social media activities. Any personal data transmitted to us after being collected as a result of your visit to our respective social media sites (e.g. Facebook fan page, Instagram, LinkedIn) will be treated confidentially and only in accordance with the statutory stipulations.

Responsibility for the processing of your data on our social media sites rests jointly with the operator of the social media site (see examples below) and with us. To the extent that processing of this data takes place within our area of responsibility, we will be available to support you with any issues relating to the topic of data protection and to the assertion of your rights pursuant to the information contained in the present Privacy Policy.

The social media service will process your personal data as soon as you start to use your own social media account when you are on our respective social media site. Processing may, for example, take place as a result of one of the following use procedures:

  • Accessing a page or a posting or video contained on a page
  • Subscribing to a site or cancelling such a subscription
  • “Liking” or “unliking” a page or using similar functions
  • Recommending a page in a post or comment
  • Commenting on, sharing or reacting to a post (including nature of the reaction)
  • Proceeding to a page by clicking on a link on another site operated by the social media provider or on a website not operated by the social media provider
  • Moving your mouse over a name or profile on a site in order to see a preview of page contents
  • Using functions offered by the social media provider, such as website, telephone number or “route planner” buttons or another button on the site
  • Information as to whether log-on has taken place via a computer or via a mobile device

Please read the privacy policy guidelines of the respective social media provider as stated below to find out which personal data is collected by the social media provider in question, how this data is processed and what data protection rights you have vis-à-vis the social media provider. We are unable to exert any influence on the collection and processing of data by the social media provider.

The social media provider via which we operate our social media website grants us access to the following data categories:

  • The social media provider grants us access to statistical analyses which provide information on the use of our social media website. The analyses which are visible to us do not permit us to conduct any individual analysis of the use behaviour of individual persons. We are only able to view aggregated data (including number of hits, likes, followers, region of origin, age group, gender), which provide an indication as to the nature of our audience and offer information on how our social media website is used. The underlying data relating to respective users is not transmitted to us.
  • We are able to set the target group we wish to reach via the social media website or via individual posts published. These settings are made on the basis of general parameters (e.g. age group, language, region interests), which allow our contents to be aligned towards certain groups. It is not possible for us to address or identify individual persons on the basis of the data made available to us by the social media provider.
  • If you contact us via a social media provider or consciously transmit personal data by interacting with us in any other way (e.g. direct networking with our social media website), we will store and process this personal data for the purposes for which you have transmitted it to us.

We process this data only for the purpose of publicising contents on social media website in a target group related way and for the purpose of optimising our social media website by obtaining a better understanding of its use. The legal basis for the data processing is your consent, Art. 6 (1) sentence 1 a) GDPR.

Apart from this, we are unable to exert any influence on data processing by the social media provider (as carried out upstream in order to make data available).

Please read the privacy policy guidelines of the respective social media provider as stated below to find out which personal data is collected by the social media provider in question, how this data is processed and what data protection rights you have vis-à-vis the social media provider:

a) Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php

b) Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA; https://twitter.com/privacy

c) Instagram, provided by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, https://help.instagram.com/519522125107875

d) LinkedIn for countries in the European Union (EU) and the European Economic Area (EEA) and for Switzerland: LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland and for all other countries: LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA.

 

§18 - YouTube

Our website uses the video platform YouTube, which is operated by Google (YouTube, LLC, 901 Cherry Ave. San Bruno, CA 94066, USA) and facilitates the playback of audio and video files.

We have integrated YouTube videos onto our website. These are stored on www.YouTube.com and may be played on our website directly. In addition to this, all these videos are embedded in “expanded data protection mode” (Shariff function). This means that no data concerning you as a user of YouTube is transmitted if you do not play the videos or have not consented to data usage by YouTube in the Consent Manager. Data is not transmitted to YouTube in its capacity as controller until you play the videos. We are not responsible for the processing of this data by YouTube and have no influence over this data transmission.

This takes place irrespective of whether you are logged in via a user account made available by YouTube or whether no user account exists. If you are logged into YouTube/Google, your data will be allocated to your account directly. You will need to log out prior to activating the button if you do not wish data to be aligned to your YouTube profile.

Further information on the purpose and scope of data collection and processing by YouTube is available in the Google Privacy Policy at https://policies.google.com/privacy?gl=DE&hl=de. This policy also contains more information on your rights and on the settings you can use to protect your privacy.

 

§19 - Links to content of other providers

Our website also contains - clearly recognisable - links to the websites of other companies. Insofar as there are links to websites of other providers, we have no influence on their content. Therefore, we cannot assume any guarantee or liability for these contents. The respective provider or operator of the pages is always responsible for the content of these pages.

The linked pages were checked for possible legal violations and recognisable infringements at the time of linking. Illegal contents were not recognisable at the time of linking. However, permanent monitoring of the content of the linked pages is not reasonable without concrete indications of a legal violation. Such links will be removed immediately if infringements become known.

 

§20 - Data security

We otherwise use suitable technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss or destruction, or against access by unauthorised third parties. Our security measures are continuously being improved in accordance with technological developments.

 

§21 - Updates and amendments to this Privacy Policy

The Privacy Policy is currently valid and is dated as at May 2023.

It may be necessary to amend this Privacy Policy as a result of further developments to our website and offers concerning it, or due to changes to the statutory or regulatory provisions. You can download and print out the current Privacy Policy here at any time.