1. Data protection at a glance
General information
The purpose of this document is to give you a quick overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you. For more details on data protection please refer to our privacy policy set out below.
Data collection on this website
Who is responsible for the data collection on this website? The data collected on this website is processed by the website operator. For the operator’s contact details, please refer to the company and legal information page of this website. How do we collect your data? We primarily collect data when you communicate your data to us. This can, for example, be data that you enter in a contact form. Our IT systems collect other data automatically when you visit our website. This mainly includes technical data (e.g. internet browser, operating system or time of page retrieval). This data is collected automatically whenever you use this website. What do we use your data for? We collect some of the data to ensure the proper functioning of the website. Some data can be used to analyse your user behaviour. What rights do you have in relation to your data? You have the right to obtain information about the personal data we store on you, its source and recipients as well as the purpose of storing the data at any time and free of charge. You also have a right to obtain rectification or erasure of this data. To do this, or if you have any other questions about data protection, you can contact us at any time using the address specified in the company and legal information. Furthermore, you have the right to lodge a complaint with the competent supervisory authority. You also have the right to obtain restriction of processing under certain circumstances. For more information, please refer to the privacy policy under “Right to restriction of processing”.
Analysis tools and third-party tools
When you visit this website, your browsing behaviour may be statistically evaluated. This happens primarily through the use of cookies and analysis programs. As a general rule, the analysis of your browsing behaviour is anonymous, i.e. this data will not be used to identify you. You can object to this analysis or prevent it by not using specific tools. For further information about these tools and your right to object to the use of these tools, please refer to the privacy policy set out below.
2. Hosting and content delivery networks (CAN)
External hosting
This website is hosted by an external service provider (hosting provider). The personal data recorded on this website is saved on the servers of the Hoster. Among other things, this can include IP addresses, contact queries, meta- and communication data, contractual data, contact data, names, website retrievals and other data generated via a website. The use of the services of a hosting provider is necessary for the performance of a contract with our potential and existing customers (Article 6 (1) (b) GDPR) and to pursue our legitimate interest to use a professional provider to offer our users a secure, fast and efficient presentation of our website content (Article 6 (1) (f) GDPR). Our hosting provider will process your data only to the extent necessary to fulfil their performance obligations and to comply with our instructions in relation to this data. Conclusion of a data processing agreement We have concluded a data processing agreement with our hosting provider to ensure that the data is processed in compliance with data protection laws and regulations.
3. General and mandatory information
Privacy policy
We as the operators of this website take the protection of your personal data very seriously. We will treat your personal data as confidential and in accordance with the applicable data protection legislation and this privacy policy. When you use this website, we collect various types of personal data. Personal data is any data that can be used to identify you. This privacy policy explains what information we collect, how we collect it and what we use it for. We also provide you with information about the purpose of collecting your data. We would like to point out that data transmission across the internet (e.g. when communicating via email) can have security flaws. It is impossible to provide blanket protection against unauthorised third-party access.
Information about the controller
The controller responsible for processing of data on this website is: EW HOF Antriebe und Systeme GmbH Oberkotzauer Str. 3 D – 95032 Hof/Saale, Germany Tel.: +49 (0) 9281-585-0 email: info@ewhof.de The controller is a natural or legal person which, alone or jointly with others, determines the purposes and means of the processing of personal data (e.g. names, email addresses, etc.) .
Withdrawal of your consent to data processing
Many data processing operations are only possible with your express consent. You have the right to withdraw your consent at any time. Sending an informal communication to us by email is sufficient for this purpose. The withdrawal of consent does affect the lawfulness of data processing based on consent before its withdrawal.
Right to object to data collection on grounds relating to the data subject’s particular situation or to data processing for direct marketing purposes (Article 21 GDPR)
WHERE THE PROCESSING OF PERSONAL DATA IS BASED ON ARTICLE 6 (1) (E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT TO PROCESSING OF PERSONAL DATA ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION AT ANY TIME; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. YOU CAN FIND THE PARTICULAR LEGAL BASIS ON WHICH PROCESSING IS BASED IN THIS PRIVACY POLICY. IF YOU MAKE USE OF THIS RIGHT TO OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA, UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS OR FOR THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS (RIGHT TO OBJECT UNDER ARTICLE 21 (1) GDPR). WHERE PERSONAL DATA ARE PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING, WHICH INCLUDES PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (RIGHT TO OBJECT UNDER ARTICLE 21 (2) GDPR).
Right to lodge a complaint with the competent supervisory authority
In cases of infringement of GDPR, the data subject has the right to lodge a complaint with a supervisory authority, in particular, in the member state of their habitual residence, place of work or place of the alleged infringement. You have the right to lodge a complaint without prejudice to any other administrative or judicial remedy.
Right to data portability
You have the right to receive the data we process based on your consent or on a contract by automated means in a commonly used and machine-readable format and have the right to transmit those data to another controller. If you request the direct transmission of the data to another controller, this only occurs if it is technically feasible.
SSL or TLS encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of sensitive content, such as the orders of requests you send to us as the site operator . You can recognise an encrypted connection in your browser’s address bar when it changes from “http://” to “https://” and the lock icon is displayed in your browser’s address bar. If SSL or TLS encryption is enabled, the data you submit to us cannot be read by third parties.
Right of access, erasure and rectification
You have the right to request access to the personal data we store on you, information about the source of the data and its recipients as well as the purpose of storing the data at any time and free of charge. You also have the right to obtain rectification or erasure of this data. If you have any further questions regarding our privacy policy or the processing of your personal data, you can contact us at any time using the address specified on the company and legal information page.
Right to restriction of processing
You have the right to obtain restriction of processing of your personal data. To do this, you can contact us at any time using the address specified on the company and legal information page. You have the right to obtain restriction of processing in the following cases:
- If you contest the accuracy of your personal data we store, we will generally need time to verify this. During the verification period, you have the right to obtain restriction of processing of your personal data.
- If the processing is unlawful, you can oppose the erasure of the personal data and request the restriction of their processing instead.
- If we no longer need the personal data, but you need the data for the establishment, exercise or defence of legal claims, you have the right to request a restriction of processing of your personal data instead of erasure.
- If you have lodged an objection in accordance with Article 21 (1) GDPR, this will be followed by a verification to establish whether our legitimate grounds override yours. As long as it is not clear whose legitimate interest is overriding, you have the right to obtain restriction of processing of personal data.
Where you have restricted the processing of your personal data, such personal data can, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a member state.
4. Data collection on this website
Cookies
Our website uses cookies. Cookies are small text files and do not cause any damage to your device. They are either stored on your device temporarily for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your device until you delete them yourself or they are automatically deleted by your web browser. In some cases, cookies from third-party companies may also be stored on your device when you access our site (third-party cookies). These permit us or you to use particular services of the third party company (e.g. cookies for handling payment services). Cookies have different functions. Numerous cookies are technically necessary, as particular website functions cannot work without them (e.g. shopping basket function or display of videos). Other cookies serve to evaluate user behaviour or display advertising. Cookies that are necessary for the electronic communication process or for the provision of certain functions desired by you (e.g. shopping basket function), are stored in accordance with Article 6(1) f GDPR. The operator of this website has a legitimate interest in the storage of cookies for the technically fault-free and optimised provision of our services. If the relevant consent was requested (e.g. consent to storage of cookies), the processing occurs exclusively in accordance with 6 (1) (a) GDPR; the consent can be withdrawn at any time. You can set your browser to notify you every time before storing cookies and decide on a case-by-case basis whether to accept them. You can also limit the acceptance of cookies to certain cases, block the acceptance of cookies altogether or enable automatic deletion of cookies when you close the browser. If you disable cookies you may not be able to use all the functions and features of our website. If cookies are used by third party companies or for analytical purposes, we will inform you separately in the context of this Privacy Policy and if necessary request consent.
Cookie consent with Borlabs Cookie
Our website employs cookie consent technology from Borlabs Cookie in order to obtain your consent to storage of particular cookies on our browser and document this in a data protection compliant manner. The provider of this technology is Borlabs – Benjamin A. Bornschein, Georg-Wilhelm-Str. 17, 21107 Hamburg, Germany (hereinafter referred to as Borlabs). If you access our website, a Borlabs cookie, which contains information about the consent you have given or withdrawal of such consent, is stored by your browser. This data is not passed on to the provider of Borlabs Cookie. The data recorded is saved until you ask us to delete it or delete the Borlabs cookie yourself or until the purpose for data storage no longer exists. Mandatory statutory retention periods remain unaffected. For more information on the data processed by the Borlabs cookie, please visit https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/. Borlabs cookie content technology is used to obtain the legally required consent for the use of cookies. The legal basis for this is Article 6 (1) (c) GDPR.
Change cookie settings
Contact form
If you use the contact form to send us a query, we will store the information you enter into the form, including your contact details, to process your query and to deal with any follow-up questions you may have. We will not share this information without your consent. Processing of this data takes place in accordance with 6(1)(b) GDPR if your query is related to performance of an agreement or is necessary for the conduct of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of queries directed at us (Article 6 (1) (f) GDPR) or on your consent (Article 6 (1) (a) GDPR), provided that the relevant consent has been obtained. We retain the data you enter in the contact form until you request that it be erased, until you withdraw your consent, or until the purpose for data storage no longer exists (e.g. after your request has been processed). This is without prejudice to mandatory provisions and in particular, statutory retention requirements.
Inquiries by email, telephone or fax
If you contact us by email, telephone or fax, we will process and store your data (name, query details) to deal with your query. We will not share this information without your consent. Processing of this data takes place in accordance with 6(1)(b) GDPR if your query is related to performance of an agreement or is necessary for the conduct of pre-contractual measures. In all other cases the processing is based on your consent (Article 6 (1) (a) GDPR) and/or on our legitimate interests ( Article 6 (1) (f) GDPR), since we have a legitimate interest in the effective processing of queries directed at us. We retain the data you send via the contact form until you request that it be erased, until you withdraw your consent, or until the purpose for data storage no longer exists (e.g. after your matter has been resolved). This is without prejudice to mandatory provisions and in particular, statutory retention requirements.
5. Analysis tools and advertising
Google Analytics
This website uses functions and features of the website analysis tool Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses “cookies”. Cookies are small text files that are stored to your computer and facilitate an analysis of the way you use the website. The information generated by the cookie about your use of the website will typically be transmitted to and stored by Google on servers in the USA. The legal basis for storage of Google Analytics cookies and the analysis tool is Article 6 (1) (f) GDPR. The website operator has a legitimate interest in analysing user behaviour aimed at optimising its website and its advertising. If the relevant consent was requested (e.g. consent to storage of cookies), the processing occurs exclusively in accordance with 6 (1) (a) GDPR; the consent can be withdrawn at any time. IP anonymisation We have activated the IP anonymisation feature on this website. This means that Google will truncate your IP address within Member States of the European Union or other Contracting States to the Agreement on the European Economic Area before it is transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA where it will be truncated. Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing them other services relating to website activity and internet use. Google will not associate your IP address transmitted by your browser with any other data held by Google. Browser plugin You can prevent the storage of cookies by changing the relevant settings of your browser. However, please note that if you do this you may not be able to use all the features of this website. Furthermore, you can prevent the collection of data about your use of the website (including your IP address) generated by the cookie and its processing by Google by downloading and installing the browser plugin provided under the following link: https://tools.google.com/dlpage/gaoptout?hl=de. Objection to data collection You can prevent the collection of your data by Google Analytics by clicking on the following link. This sets an opt-out cookie which will prevent future collection of your data when visiting this website:
For more information about how Google Analytics handles user data, please refer to Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de. Data processing agreement We have concluded a data processing agreement with Google and we fully implement the strict requirements of the German data protection authorities when using Google Analytics. Demographic features of Google Analytics This website uses the “demographics features” of Google Analytics. It can be used to generate reports that contain statements on the age, gender and interests of visitors to our website. This data comes from interest-based advertising from Google and third-party visitor data. This data cannot be used to identify any particular individual. You can disable this feature at any time from the Ad Preferences Manager of your Google Account or generally stop Google Analytics from collecting your data as described in the “Objection to data collection” section. Retention period Data stored at Google on the user and event level which are linked to cookies, user IDs (e.g. user ID) or advertising IDs (e.g. DoubleClick cookies, Android advertising ID) will be anonymised after 14 months or erased. For details, please refer to the following link: https://support.google.com/analytics/answer/7667196?hl=de
6. Plugins and tools
Google Web Fonts (local hosting)
This site uses so-called web fonts provided by Google for the uniform display of fonts. The Google Fonts are installed locally. There is no connection to Google servers.
Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://policies.google.com/privacy?hl=en.
YouTube in the privacy-enhanced mode
This website integrates YouTube videos. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. We use YouTube in privacy-enhanced mode. According to YouTube, this mode ensures that no information is stored about the visitors on this website before they view the video. However, the privacy-enhanced mode does not necessarily exclude the transfer of data to YouTube partners. For example, YouTube establishes a connection to the Google DoubleClick network, irrespective of whether you view a video. As soon as you start a YouTube video on this website, a connection is established to the YouTube servers. The YouTube server will be informed regarding which of our pages you visited. If you are logged into your YouTube account, YouTube will allow you to associate your browsing behaviour directly with your personal profile. You can prevent this by logging out of your YouTube account. Moreover, after starting a video, YouTube can store various cookies on your device. YouTube can obtain information on the visitors of this website with the help of these cookies. This information is used, among other things, to record video statistics, improve user friendliness and prevent fraud attempts. The cookies remain on your device until you delete them. If applicable, additional data processing procedures can be triggered after the start of a YouTube video, over which we have no influence. The use of YouTube occurs in the interest of attractive presentation of our online offering. This constitutes a legitimate interest within the meaning of Article 6 (1) (f) GDPR. If the relevant consent was requested (e.g. consent to storage of cookies), the processing occurs exclusively in accordance with 6 (1) (a) GDPR; the consent can be withdrawn at any time. You can find more information on data protection in the Google’s Privacy Policy at: https://policies.google.com/privacy?hl=de.
Google Maps (with consent)
This website used the map service Google Maps via an API. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. To guarantee data protection on this website, Google Maps is deactivated if you access this website for the first time. A direct connection is only established to Google’s servers if you establish a direct connection to Google Maps (consent in accordance with Article 6 (1) (a) GDPR). This prevents your data being transmitted directly to Google upon first accessing the page. After activation, Google Maps will save your IP address. Normally, this is then transmitted to a server of Google in the USA and stored there. The provider of this page has no influence on this data transmission after activation of Google Maps. For further information on handling of user data, please refer to Google’s privacy policy at: https://www.google.de/intl/de/policies/privacy/.
ManageWP
We administrate this website with the assistance of the ManageWP tool. The provider is GoDaddy.com WP Europe, Trg republike 5, 11000 Belgrade, Serbia (hereinafter referred to as ManageWP).
Among other things, ManageWP ensures that we can monitor the security and performance of our website as well as generate automatic backups. Consequently, ManageWP has access to all of the website’s content, including our databases. ManageWP is being hosted on the provider’s servers.
The use of ManageWP is based on Art. 6 (1)(f) GDPR. The website operator has a legitimate interest in a website(s) that work(s) as effectively and securely as possible. If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG, insofar the consent includes the storage of cookies or the access to information in the user’s end device (e.g., device fingerprinting) within the meaning of the TTDSG. This consent can be revoked at any time.
Data processing
We have concluded a data processing agreement (DPA) with the above-mentioned provider. This is a contract mandated by data privacy laws that guarantees that they process personal data of our website visitors only based on our instructions and in compliance with the GDPR.
7. Own services
Handling of applicant data
We offer you the opportunity to send us an application (e.g. by email, by post or online application form). In the following, we inform you about the scope, purpose and use of your personal data collected as part of the application process. We collect, process and use your data strictly in accordance with applicable data protection laws and regulations and further statutory provisions and we will treat all your data with strictest confidence. Scope and purpose of data collection If you send us your application, we process you personal data (e.g. contact and communication data, application documents, notes as part of the application discussions, etc.) if this is necessary to decide on the establishment of an employment relationship. The legal basis for this is Section 26 of the German Data Protection Act (BDSG) (initiation of an employment relationship), Article 6 (1) (b) GDPR (general contract initiation) and – if you have given your consent – Article 6 (1) (a) GDPR. You can withdraw your consent at any time. Within our company, your personal data will only be disclosed to persons involved in the processing of your application. If the application is successful, the data you submit is stored on the basis of Section 26 BDSG and Article 6 (1) (b) GDPR for the purpose of conducting the employment relationship in our data processing systems. Data retention period If we cannot make you a job offer, or you reject a job offer or withdraw your application, we reserve the right to store the data provided to us based on our legitimate interests (Article 6 (1) (f) GDPR) for a period of up to 6 months from the end of the application process (rejection or withdrawal of the application). The data is then erased and the physical application documents are destroyed. We retain the data, in particular, as evidence in the event of a legal dispute. If it is evident that it will be necessary to retain your data after the end of the six-month period (e.g. due to an impending or pending legal dispute), the data will only be erased once it is no longer needed. Your data may be retained for longer if you have given appropriate consent (Article 6 (1) (a) GDPR) or if statutory retention requirements prevent erasure. Inclusion in the applicant pool If we do not make you a job offer, there is the option to include you in our applicant pool. In this case, all documents and information from the application will be included in the applicant pool so that we can contact you with suitable vacancies. Inclusion in the applicant pool occurs exclusively on the basis of your express consent (Article 6 (1) (a) GDPR). Granting of consent is voluntary and does not have any relationship with the ongoing application procedure. The data subject can withdraw their consent at any time. In this case, the data from the applicant pool is irretrievably deleted if no grounds for statutory retention exist. The data from the applicant pool is irretrievably deleted at the latest two years after the granting of consent.