Privacy notice
General information on the processing of your data
We are legally obliged to inform you on the processing of your personal data (hereinafter "data") when you use our website. We take the protection of your privacy very seriously. This privacy notice informs you on details of the processing of your data as well as your legal rights in this regard. For terms such as "personal data" or "processing", the legal definitions from Art. 4 GDPR are decisive. We reserve the right to adapt the privacy notice with effect for the future, especially in the case of further development of the website, the use of new technologies or change of the legal basis or the corresponding case law. We recommend reading the privacy notice from time to time and have a printout or a copy for your records.
Scope
The privacy notice applies to all pages of www.bn-automation.com. It does not cover any linked websites or internet presences from other providers.
Responsible provider
Party responsible for the processing of personal data within the scope of this privacy notice:
BN Automation AG
Gewerbepark „Am Wald“ 5a
D-98693 Ilmenau
Phone: +49 3677 855 0
Fax: +49 3677 855 599
e-mail: info@bn-automation.de
Questions about data protection
If you have any question on data protection with regard to our company or our website, you can contact our data protection officer:
Birk Schade
Data protection officer
BN Automation AG
Gewerbepark „Am Wald“ 5a
D-98693 Ilmenau
Phone: +49 3677 855 315
Fax: +49 3677 855 599
e-mail: b.schade@bn-automation.de
Security
We have taken comprehensive technical and organizational precautions to protect your personal data against unauthorized access, misuse, loss and other external disturbances. To this end, we regularly review our security measures and adapt them to the state of the art.
Your rights
You have the following rights with regard to your personal data, which you can assert against us:
- Right to information: You can request information in accordance with Art. 15 GDPR about your personal data that we process.
- Right to rectification: If the information concerning you is (no longer) correct, you can request a correction according to Art. 16 GDPR. If your data are incomplete, you can request completion.
- Right to erasure: You can request erasure of your personal data in accordance with Art. 17 GDPR.
- Right to restriction of processing: In accordance with Art. 18 GDPR, you have the right to request that your personal data be restricted.
- Right to object to processing: You have the right, for reasons arising from your particular situation, at any time to object to the processing of your personal data, which is based on Art. 6 Para. 1 Clause 1 lit. e) or lit. f) GDPR, in accordance with Art. 21 Para. 1 GDPR. In this case, we will not process your data further unless we can prove compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, and if the processing serves to assert and exercise or defend against legal claims (Art. 21 Para. 1 GDPR). In addition, according to Art. 21 (2) GDPR, you have the right to object at any time to the processing of personal data concerning you for the purpose of direct marketing; this also applies to any profiling insofar as it is associated with such direct advertising. We draw your attention to the right of objection in this privacy notice in connection with the respective processing.
- Right to withdraw your consent: Insofar as you have given your consent to processing, you have a right to withdraw according to Art. 7 Para. 3 GDPR.
- Right to data portability: You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format ("data portability") and the right to forward these data to another controller if the requirements of Art. 20 Para. 1 lit. a, b GDPR have been met (Art. 20 GDPR).
You can assert your rights by notifying the contact details given in the section "Responsible provider" or the data protection officer named by us.
If you are of the opinion that the processing of your personal data violates data protection law, you also have the right, according to Art. 77 GDPR, to complain to a data protection supervisory authority of your choice.
Use of our website
In principle, you can use our website for purely informational purposes without disclosing your identity. When calling up the individual pages of the website in this sense, only access data is transmitted to our web space provider so that the website can be displayed to you. The following data are processed here:
- browser type / browser version,
- the operating system used,
- language and version of the browser software,
- date and time of access,
- host name of the accessing device,
- IP-address,
- websites accessed through the website,
- referrer URL (the previously visited website),
- message as to whether the call was successful.
The temporary processing of this data is necessary to technically enable a website visit and delivery of the website to your device. The access data is not used to identify individual users and is not merged with other data sources. A further storage in log files takes place in order to guarantee the functionality of the website and the security of the information technology systems. The legal basis for the processing is Art. 6 Para. 1 Clause 1 lit. f) GDPR. Our legitimate interests lie in ensuring the functionality of the website and the integrity and security of the website. The storage of access data in log files, in particular the IP address, for a longer period enables us to recognize and prevent abuse. This includes, for example, the defense of requests that overloaded with the service or use of a bot. The access data will be deleted as soon as they are no longer required to achieve the purpose for which they were processed. In the event of the data acquisition for the provision of the website, this is the case when you end your visit to the website. The log data are stored directly and exclusively accessible to administrators and deleted after nine months at the latest. After that, they are only available indirectly via the reconstruction of backup tapes and are permanently deleted after a maximum of fifty months.
You may object to the processing. You have the right to object for reasons that arise from your particular situation. You can send us your objection using the contact details given in the “Responsible provider” section.
Tracking
In addition to the aforementioned access data, so-called cookies, pixels, browser fingerprinting or other tracking technologies are used when using the website. Cookies are small text files with a sequence of numbers that are stored locally in the cache of the browser used. Pixels are one-pixel images that are intransparent or created in the background color of the website and are therefore not visible to the user. The pixel also collects information about your user behavior on the website. Fingerprinting technologies generate a unique fingerprint based on the browser settings and thus identify an individual browser. Using a script, which every Internet browser automatically executes, information such as the resolution of the screen, fonts used, operating system, hardware information and integrated browser plug-ins can be collected, which in their specific combination can ultimately allow tracing back to a specific user. The tracking technologies are used to make our website user-friendly. The use of tracking technologies may be technically necessary or it may be used for other purposes (e. g. analysis / evaluation of website usage).
Technically necessary elements
Some elements of our website require that the calling browser can also be identified after changing pages. In the technically necessary elements, such as cookies or similar methods of terminal device access, personal data are processed for the purpose of carrying out or facilitating electronic communication and providing an information society service requested by the user. The user data collected through technically necessary elements are not processed to create user profiles. We use so-called "session cookies", which store a session ID with which various requests from your browser can be assigned to the joint session. "Session cookies" are necessary for using the website. In particular, it enables us to recognize the device used when you return to the website. The legal basis for this processing is Art. 6 Para. 1 Clause 1 lit. f) GDPR. Our legitimate interests in processing consist in providing special functionalities and thereby making the use of the website more attractive and effective. The "session cookies" are deleted as soon as you log out or, depending on which browser you are using and which browser settings you have made, when you close the browser.
You can object to the processing. You have the right to object for reasons arising from your particular situation. You can send us your objection using the contact details given in the “Responsible provider” section.
Technically unnecessary tracking
We also use cookies, pixels, browser fingerprinting and other tracking technologies on the website to enable analysis of users' surfing behavior. For example, the following data is stored and processed:
- frequency of page views,
- use of website functions.
The legal basis for this processing is your consent in accordance with Art. 6 Para. 1 Clause 1 lit. a) GDPR. The technically unnecessary cookies, pixels and other tracking technologies are automatically deleted after a specified period, which may differ depending on the tracking method. Insofar as we integrate third-party cookies or pixels and similar tracking technologies into our website, we will point this out to you separately below.
You can object to the processing. You have the right to object for reasons arising from your particular situation. You can send us your objection using the contact details given in the “Responsible provider” section.
Contao Consent
We use the consent tool "Contao Consent" to request consent for the processing of your device information and personal data using cookies or other tracking technologies on our website. With the help of "Contao Consent" you have the option of agreeing or rejecting the processing of your terminal device information and personal data using cookies or other tracking technologies for the purposes listed in "Contao Consent". Such processing purposes can be, for example, the integration of external elements, the integration of streaming content, statistical analysis, range measurement and personalized advertising. With the help of "Contao Consent" you can give or reject your consent for all processing purposes or you can give or reject your consent for individual purposes or individual third-party providers. You can also change the settings you have made afterwards. The purpose of integrating “Contao Consent” is to allow the users of our website to decide on the setting of cookies and similar functionalities and offer the option of changing settings that have already been made while continuing to use our website. In the course of using “Contao Consent”, we process personal data and information on the end devices used. No data will be sent to a third party. The information about the settings you have made is stored decentrally in your end device. The legal basis for the processing is Art. 6 Para. 1 Clause 1 lit. c) GDPR in conjunction with Art. 7 Para. 1 GDPR, insofar as the processing serves to fulfill the legally standardized obligations to provide evidence for the granting of consent. Otherwise, Art. 6 Para. 1 Clause 1 lit. f) GDPR is the relevant legal basis. Our legitimate interests in processing lie in the storage of user settings and preferences with regard to the use of cookies and other functionalities. Twelve months after the user settings have been made, the user will be asked again for consent. The user settings made will then be saved again for this period of time, unless you delete the information about your user settings yourself beforehand in the end device capacities provided for this purpose.
You can object to the processing. You have the right to object for reasons that arise from your particular situation. You can send us your objection using the contact details given in the “Responsible provider” section.
Contacting this company
When you contact this company, e. g. by e-mail or via the contact form on the website, we will process the personal data you have provided in order to answer your request. In order to process inquiries via the contact form on the website, a name and a valid email address must be given. At the time the message is sent to us, your IP address and the date and time of registration are processed, too. The legal basis for the processing is Art. 6 Para. 1 Clause 1 lit. f) GDPR or Art. 6 Para. 1 Clause 1 lit. b) GDPR if the contact is aimed at concluding a contract. If the request is aimed at the conclusion of a contract, the details of your data are necessary and binding for the conclusion of a contract. If the data is not provided, it is not possible to conclude or implement a contract in the form of contacting or processing the request. The processing of the personal data from the input mask merely serves to process the contact. In case of contact by e-mail, there is also the necessary legitimate interest in processing the data. The other data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems. In this context, the data are not passed on to third parties. We delete the data arising in this context after the processing is no longer required - usually two years after the end of the communication - or, if need be, limit the processing to compliance with the existing legally mandatory retention requirements.
You can object to the processing. You have the right to object for reasons that arise from your particular situation. You can send us your objection using the contact details given in the “Responsible provider” section.
Processing for contractual purposes
We process your personal data if and to the extent that this is necessary for the initiation, establishment, implementation and / or termination of a legal transaction with this company. The relevant legal basis follows from Art. 6 Para. 1 Clause 1 lit. b) GDPR. The provision of your data is necessary for the conclusion of the contract and you are contractually obliged to make your data available. If your data is not provided, it is not possible to conclude and / or execute a contract. After the purpose has been achieved (e. g. contract processing), the personal data will be blocked for further processing or deleted, unless we have a contractual agreement based on your consent (e. g. consent to the processing of the email address for sending electronic advertising mail) Agreement, a legal authorization (e. g. authorization to send direct mail) or due to legitimate interests (e. g. storage to enforce claims) are authorized to further processing.
Your personal data will be passed on to third parties if
- it is necessary for the establishment, execution or termination of legal transactions with this company (e. g. when passing on data to a payment service provider / a shipping company to process a contract with you), (Art. 6 Para. 1 Clause 1 lit. b) GDPR), or
- a subcontractor or vicarious agent, whom we use exclusively in the context of providing the offers or services you have requested, needs this data (such auxiliary persons are only entitled to process the data insofar as you are not expressly informed otherwise, as this is for the provision of the offer or service is necessary), or
- there is an enforceable official order (Art. 6 Para. 1 Clause 1 lit. c) GDPR), or
- there is an enforceable court order (Art. 6 Para. 1 Clause 1 lit. c) GDPR), or
- we are obliged to do so by law (Art. 6 Para. 1 Clause 1 lit. c) GDPR), or
- the processing is necessary to protect the vital interests of the data subject or another natural person (Art. 6 Para. 1 Clause 1 lit. d) GDPR), or
- it is necessary for the performance of a task that is in the public interest or is carried out in the exercise of official authority (Art. 6 Para. 1 Clause 1 lit. e) GDPR), or
- we can rely on our overriding legitimate interests or a third party for disclosure (Art. 6 Para. 1 Clause 1 lit. f) GDPR).
Your personal data will not be passed on to other persons, companies or bodies unless you have given your valid consent to such a transfer. The legal basis for processing is then Article 6 Paragraph 1 Clause 1 lit. a) GDPR. In the context of this data protection information, we refer you to the respective recipient with regard to the respective processing operation.
Application process
As part of the online application process, we process your contact details, such as name, address, email address, telephone number(s), data from your application documents, in particular certificates, curriculum vitae, cover letter, date of birth and gender, possibly special categories of personal data such as marital status and degree of disability.
The purpose of processing is to check your suitability for a position in our company and to carry out the application process. In the case of an (unsolicited) application by email, we also process metadata of your e-mail, such as the date and time for carrying out the application process. If you apply using our online application form on our website, the access data mentioned in the section "Use of our website" will also be processed in order to be able to digitally submit your application documents and other documents to us during the application process.
Upon receipt of your application, your data will be viewed by the HR department. Suitable applications are then forwarded internally to the department heads for the vacant position. The further procedure will then be coordinated. In principle, only those persons in the company have access to your data who need this for the proper flow of our application process.
The legal basis for processing is Article 6 (1) (b) GDPR in conjunction with Section 26 (1) of the Federal Data Protection Act (FDPA), insofar as the data processing is necessary for the establishment and implementation of the employment relationship. When processing special categories of personal data, the legal basis is Art. 9 Para. 2 lit. b) GDPR in conjunction with Section 26 Para. 3 FDPA. The provision of your data is necessary and mandatory for the conclusion or execution of the contract. If you do not provide your data, you cannot apply to us.
We save your data as long as this is necessary in connection with the application process. As a rule, we delete your personal data as soon as the same are no longer required for the purposes mentioned above and unless otherwise required by law. In particular, we keep the personal data for as long as we need them to assert legal claims or to defend against claims. Accordingly, in the event of a rejection, we delete applicants' data six months after sending the notification of rejection. The legal basis for processing for legal prosecution purposes is Article 6 (1) (b) GDPR in conjunction with Section 26 (1) of the FDPA. When processing special categories of personal data, especially any disabilities, the legal basis is Art. 9 Para. 2 lit. b) GDPR in conjunction with Section 26 para. 3 FDPA or Art. 9 Para. 2 lit. f) GDPR.
If an application is accepted, we will save your data for the subsequent employment relationship within our HR department. Further information can be found in the data protection information for employees.
If we do not have a vacancy, but are generally interested in working with you, we will process your application documents in our applicants’ pool with your consent so that we can contact you in the event of a vacancy. We will contact you separately to obtain your consent. The legal basis is your consent in accordance with Article 6, Para. 1, Clause 1, lit. a) of the GDPR. In the applicants’ pool, the data will be deleted after two years, unless you have consented to a longer storage period.
You can revoke your consent at any time by sending a message to us (see contact details in the “Responsible” section). The legality of the processing remains unaffected until the withdrawal is exercised.
Hosting
We use external hosting services from the provider ALL-INKL.COM - Neue Medien Münnich (Hauptstrasse 68, 024742 Friedensdorf), which serve to provide the following services: computing capacity, storage resources and database services. For these purposes, all data - including the access data mentioned under the item "Use of our website" - that are required for the operation and use of our website are processed. The legal basis for the processing is Art. 6 Para. 1 Clause. 1 lit. f) GDPR. With the use of external hosting services, we pursue an efficient and secure provision of our website.
You can object to the processing. You have the right to object for reasons that arise from your particular situation. You can send us your objection using the contact details given in the “Responsible provider” section.
Integration of third-party content
Third-party content such as videos, maps or graphics from other websites are integrated into the website. This integration always requires that the providers of this content (“third-party providers”) perceive the IP addresses of the users. Because without the IP address, you cannot send the content to the browser of the respective user. The IP address is therefore required to display this content. In the following, we will inform you about the services of external providers currently used on our website as well as about the respective processing in individual cases and about your existing options for objection and revocation.
Fonts.com
For the uniform representation of fonts, we use so-called web fonts, which are provided by "Fonts.com" (Monotype GmbH, Werner-Reimers-Strasse 2-4, 61352 Bad Homburg). When you visit a website, your browser loads the required web fonts from "Monotype" into your browser cache in order to display texts and fonts correctly and faster. For this purpose, the browser transmits your IP address to “Monotype” to establish the connection to the “Monotype” servers. "Monotype" receives the information that you have accessed our website. The legal basis for the processing is Art. 6 Para. 1 Clause 1 lit. f) GDPR. With the use of "Fonts.com" we pursue the legitimate interest in a uniform and appealing presentation of our online offers. "Monotype" also processes some of the data in the USA. There is no adequacy decision by the EU Commission for data transfer to the USA; we have concluded so-called standard contractual clauses with “Monotype” in order to oblige “Monotype” to an appropriate level of protection. We will provide you with a copy on request. Further information on the purpose and scope of processing by “Monotype” and the storage period at “Fonts.net” can be found at https://www.monotype.com/legal/privacy-policy.
You can object to the processing. You have the right to object for reasons that arise from your particular situation. You can send us your objection using the contact details given in the “Responsible provider” section.
Google Tag Manager
We use the “Google Tag Manager” from “Google” (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001) on our website. "Google Tag Manager" is a solution that can manage website tags and other elements from third-party providers via an interface.
On the one hand, when the website is called using Google Tag Manager, an http request is sent to Google. As a result, device information and personal data such as your IP address and information about your browser settings are transmitted to Google. We use the Google Tag Manager to facilitate electronic communication by transferring information to third-party providers via programming interfaces, among other things. The respective tracking codes of the third-party providers are implemented in the Google Tag Manager without us having to laboriously change the source code of the website ourselves. Instead, the integration takes place via a container that places a so-called “placeholder” code in the source code. In addition, the Google Tag Manager allows users to exchange data parameters in a specific order, in particular by organizing and systemizing the data packets. Your data is occasionally also transmitted to the USA. So-called "standard contractual clauses" have been concluded with Google in order to ensure compliance with an appropriate level of data protection. Upon request, we will provide you with a copy of the standard contractual clauses. The legal basis for the processing is Art. 6 Para. 1 Clause 1 lit. f) GDPR. Our legitimate interests in processing lie in the facilitation and implementation of electronic communication by identifying communication endpoints, control options, exchanging data elements in a specified order, and by identifying transmission errors. The Google Tag Manager does not initiate any data storage. For more information on data protection at “Google” see: http://www.google.de/intl/de/policies/privacy.
You can object to the processing. You have the right to object for reasons that arise from your particular situation. You can send us your objection using the contact details given in the “Responsible provider” section.
On the other hand, the Google Tag Manager installs third-party tags such as tracking codes or counting pixels on our website. The tool triggers other tags, which in turn collect your data; We will explain this to you separately in this data protection declaration. The Google Tag Manager itself does not evaluate the terminal device information and personal data of the users recorded by the tags. Rather, your data will be forwarded to the respective third-party provider for the purposes stated in our consent management tool. We have adjusted the Google Tag Manager to our consent management tool in such a way that the triggering of certain third-party services in the Google Tag Manager is made dependent on your selection in our consent management tool, so that only those third-party tags trigger data processing for which you have given consent. The use of the Google Tag Manager is covered by the consent for the respective third-party service. The legal basis for the processing is your consent in accordance with Art. 6 Para. 1 Clause 1 lit. a) GDPR. Google also processes some of the data in the USA. There is no adequacy decision by the EU Commission for data transfer to the USA; the legal basis for the transfer to the USA is your consent according to Art. 49 Para. 1 Clause 1 lit. a) GDPR. You can find out how long your data will be stored in the following descriptions of the individual third-party services. For more information on data protection at “Google” see: http://www.google.de/intl/de/policies/privacy.
A revocation of your consent to the processing and the third country transfer is possible at any time by pushing back the slider in the „privacy settings“ of the consent tool for the respective third-party provider. The legality of the processing carried out on the basis of the consent until the revocation is not affected by the revocation.
YouTube
On the website we use plug-ins from the video platform "YouTube.de" or "YouTube.com", a service provided by YouTube LLC (head office at 901 Cherry Avenue, San Bruno, CA 94066, USA; hereinafter "YouTube"), for which "Google" (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001) is the controller within the meaning of data protection law. Videos can be played directly on our website using plug-ins from the streaming platform “YouTube.de” or “YouTube.com” integrated on our website. When using the streaming function, information that is stored on users' end devices is also processed. The purpose of data processing is to include visual content ("videos") that we have published on "Youtube.de" or "Youtube.com" on this website. The videos are integrated in the "extended data protection mode", i.e. no user data is transmitted to "YouTube" if no videos are played. While videos are being played on our website, "YouTube" receives the information that the corresponding subpage of our website has been accessed. In addition, access data, in particular the IP address, browser information, the previously visited website and the date and time of the server request are transmitted to "Google". This happens regardless of whether "YouTube" provides a user account through which users are logged in, or whether there is no user account. If you are logged into "Google" as a user, the user data will be assigned directly to the respective YouTube account. If you do not wish to be assigned to your profile on "YouTube", you must log out before activating the button. “YouTube" saves the data as a usage profile and processes it independently of the existence of a user account with "Google" for the purposes of statistical analysis and advertising.
The legal basis for the processing of your data is your consent in accordance with Art. 6 Para. 1 Clause 1 lit. a) GDPR. "YouTube" also processes your data in the USA. There is no adequacy decision for data transfer to the USA; The legal basis for the transfer to the USA is your consent according to Art. 49 Para. 1 Clause 1 lit. a) GDPR. For more information on data protection and the storage period on "YouTube" see https://policies.google.com/privacy.
A revocation of your consent to the processing and third country transfer is possible at any time by pushing back the slider in the „privacy settings“ of the consent tool. The legality of the processing carried out on the basis of the consent until the revocation is not affected by the revocation.
Services for statistical and analysis and marketing purposes
We use third-party services for statistical, analysis and marketing purposes. This enables us to provide you with a user-friendly, optimized use of the website. The third-party providers use cookies to control their services (see the “Cookies” section above). In the following, we will inform you about the services of external providers currently used on our website as well as about the respective processing in individual cases and your existing cancellation options.
Google Analytics
In order to be able to tailor our website optimally to user interests, we use the web analysis service "Google Analytics" from "Google". The provider and data recipient is Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland and Google, LLC 1600 Amphitheater Parkway Mountain View, CA 94043, USA; hereinafter: "Google").
When using “Google Analytics”, technologies such as “cookies”, “tracking pixels” and “device fingerprinting” are used to trace certain user behavior on websites. Information that is stored on users' end devices is also processed.
By means of the "tracking pixels" integrated in websites and the "cookies" stored on users 'end devices, "Google" processes the information generated about the use of our website by users' end devices and access data for the purpose of statistical analysis - e.g. that a certain website has been called up or a newsletter subscription has taken place. For this purpose, it can also be determined whether different end devices belong to you or your household. The access data includes in particular the IP address, browser information, the previously visited website and the date and time of the server request.
"Google Analytics" is used with the extension "anonymizeIp()". As a result, IP addresses are further processed in a shortened form in order to make it more difficult to identify individuals. According to Google, the IP addresses are shortened within member states of the European Union. Due to the "Google Analytics" tool used, the user's browser automatically establishes a direct connection to the Google server.
If users are registered with a Google service, Google can assign the visit to the user account and create and evaluate cross-application user profiles.
The legal basis for processing is your consent in accordance with Art. 6 Para. 1 Clause 1 lit. a) GDPR.
"Google" also processes some of the data in the USA. There is no adequacy decision by the EU Commission for a data transfer to the USA; the legal basis for the transfer to the USA is your consent in accordance with Art. 49 Para. 1 Clause 1 lit. a) GDPR.
Your data in connection with "Google Analytics" will be deleted after fourteen months at the latest. For more information on data protection at “Google” see: http://www.google.de/intl/de/policies/privacy.
A revocation of your consent to the processing and third country transfer is possible at any time by pushing back the slider in the „privacy settings“ of the consent tool. The legality of the processing carried out on the basis of the consent until the revocation is not affected by the revocation.