In the following, we inform you about the collection of personal data when using our website www.hybrid-technologies.com (hereinafter "Website"). We explain which personal data we collect in the context of your use, how and for which purposes we collect, process and use these data and which rights you have. Protecting your personal data is very important to us.
Personal data means any information relating to you personally, such as your name, mailing address or e-mail address, but also technical data that can be attributed to you, such as the IP address attributed to you.
We reserve the right to adjust this Privacy Statement at any time to changed legal regulations and changes in our data processing.
1. Data Controller
We, the TB&C Holding GmbH, Junostraße 1, 35745 Herborn, Germany, email: firstname.lastname@example.org, tel. +49 2772 57595-32, are the controller for collecting and processing your personal data upon your visit to and use of the of the Website.
2. Contact Details of the Data Protection Officer
Our data protection officer is available under: Henning Welz, GdS - Gesellschaft für Datenschutz Mittelhessen mbH, Tel.: 06421 80413 10, E-Mail: email@example.com.
3. Collection of personal data when visiting our Website
3.1. Automatic data processing
3.1.1. When our Website is visited only for the purpose of obtaining information, i.e. if you do not register or provide us with information in any other way, we will only collect personal data that your browser transmits to our server. When you view our website, we collect the following data which we require for technical purposes to present our Website to you and to guarantee stability and security:
- date and time of the access
- Content of the requirement (specific page)
- Access status/HTTP status code
- Transferred data volume
- Website from which the requirement comes (referrer URL)
- the browser used
- Operating system and its user interface
- Language and version of the browser software
The legal basis for the collection is Art. 6 para. 1 subpara. 1 lit. f) of the General Data Protection Regulation ("GDPR"). This provision allows the processing of personal data, as far as this is necessary for the use of the Website, or in the context of the legitimate interests of the person responsible, unless your basic rights, freedoms or interests prevail. Our legitimate interest is the provision of a website with information and services and the administration of our Website.
3.1.2. In addition to the above-mentioned data, cookies are stored on your computer when you use our Website. Cookies are small text files that are attributed to and stored on the browser on your hard drive whereby certain information is transferred to the party that places the cookies (in this case us). Cookies cannot run programs or transfer viruses to your computer. They help to make the Website more user-friendly and effective overall. This is in the legitimate interest of the controller. Legal basis for this is Art. 6 para. 1 subpara. 1 lit. f) GDPR.
a) This Website uses the following types of cookies, the scope and function of which is explained below:
- Transient Cookies (see b)
- Persistent Cookies (see c).
b) Transient cookies are deleted automatically when you close the browser. They include in particular session cookies. They store a session ID which allow various enquiries from your browser to be attributed to the common session. This allows your computer to be recognized again when you return to our Website. Session cookies are deleted when you log out or close your browser.
c) Persistent cookies are automatically deleted after a specified period, which may differ depending on the cookie. You can delete the cookies in the security settings of your browser at any time.
Here you find a list of cookies used by us:
Type: performance evaluation
Function: Google cookies allow us to use Google Analytics to evaluate and improve our web performance.
d) You can configure your browser settings according to your wishes and, for example, refuse to accept third-party cookies or all cookies. We draw your attention to the fact that you may then not be able to use all the functions on this Website.
3.1.4. Use of web analytics tools:
We use Google Analytics to analyse the activities on our website.
Google Analytics is a web service provided by Google Inc. ("Google"). Google Analytics uses "cookies", text files that are stored on your computer and that enable your use of the website to be analysed. The information generated by the cookie about your use of the website will be transmitted to and stored Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland. However, if IP anonymisation is activated on this website, your IP address will be truncated by Google within the Member States of the European Union or in other countries that are Contracting Parties to the Agreement in the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google Server Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland. Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity and to provide other services regarding website activity and internet usage for the website operator. The IP address transmitted by your browser within Google Analytics is not merged with other Google data. You can prevent cookies from being stored by selecting the appropriate settings in your browser; however, we wish to point out that by doing so, you may not be able to enjoy the full functionality of this website. Furthermore, you can prevent the collection of data generated by the cookie and related to the usage of the website (incl. your IP address) and the processing of these data by Google by downloading and installing the browser plug-in available at the following link (https://tools.google.com/dlpage/gaoptout?hl=de).
For more information, see http://tools.google.com/dlpage/gaoptout?hl=de or at http://www.google.com/intl/de/analytcs/privacyoverview.html (general Google Analytics and privacy information).We wish to point out that on this website Google Analytics has been extended with the code "gat._anonymizeIp();" in order to ensure the anonymous collection of IP addresses (IP masking).
3.2. Collection and processing of personal data – contact
We will only collect and process personal data, such as your name, mailing or email address, if you provide these data within the context of using the Website and insofar as such collection and processing is permitted by law or covered by your consent.
The use of certain features of our Website, such as the contact form, requires a collection and processing of personal data. In this case, we take the principle of data-saving seriously and collect only those personal data marked as mandatory, which are required for the purpose of using and processing the website function. The other possible information is voluntary and is used by us in particular for the purpose of being able to address you more personally and / or individually or, for example, by the possibility of queries, to improve the service for you.
In addition, if your prior consent is required for certain data collection and processing, we will, of course, ask you for your consent in advance at the appropriate section of our Website. This declaration of consent is recorded by us.
You are entitled to revoke your consent at any time in whole or in part with effect for the future. Such a revocation will be also recorded by us.
4. Transfer of data to third parties
4.1.1. The personal data collected when using our Website are transmitted to state institutions and authorities as well as private legal entities on the basis of statutory provisions or judicial or regulatory decisions, and in the event of infringements of our rights passed to state institutions and authorities for purposes of legal or penal enforcement.
5. Data Security
The personal data collected and stored by us will be treated confidentially and protected against loss and alteration as well as unauthorized access by third parties through appropriate technical and organizational precautions.
The transmission of personal data over the Internet occurs by means of encryption. We use SSL encryption (Secure Socket Layer) for data transmission.
6. Duration of storage
We delete your personal data when the purpose of storage ceases to exist.
The personal data collected automatically in accordance with Clause 3.1 will not be saved as a log file, but deleted immediately after each use of our Website.
The personal data collected in the course of the use of certain features of our Website in accordance with Clause 3.2, such as the contact form, we will only store as long as this is required to carry out or complete the functions or services concerned.
However, storage can also take place if this is required by regulation which we have to observe such as statutory storage and documentation obligations. In such a case, we will delete or block your personal data after the end of the period of validity of the corresponding legal requirements.
7. Google Maps
We use Google maps on our website.
8. Google Web Fonts
9. Data Protection Information acc. to Art. 13 GDPR (Apllicants)
As part of the application process we obtain personal data from you. For this data we are:
TB&C (TB&C Outsert Center GmbH, TB&C Technology GmbH und TB&C Holding GmbH), Personalwesen, 02772/57595-18, firstname.lastname@example.org
Types of data categories and origin of data:
When you apply to us, we process the information, which we obtain from you in the application process, e.g. application letter, CV, certificates, written correspondence, telephone or oral communication. In addition to your contact details, your education, qualifications, work experience and skills are also of great significance to us. We will only evaluate you based on your suitability for the position, therefore you do no need to submit a photo.
Purposes and legal basis for data processing and duration of data storage:
Your data will initially be processed exclusively for the application process. If your application is successful, your data will be used as part of your personnel file, for the implementation and the termination of the employment, and will be deleted in accordance to the rules applicable to personnel files. If we are currently unable to offer you employment, we will process your data for up to six months after the rejection has been sent in order to defend ourselves against possible legal claims, particularly those regarding alleged discrimination in the application process. If you receive cost reimbursements or other tax-related transactions, the appropriate accounting documents will be retained in order to fulfil budgetary and tax retention obligations in accordance to the applicable retention obligations. Our human resources department will have access to your data, as well as the respective department, to which you applied, and if necessary, also the accounting department. Our administrators and processors have the possibility to access data processed by IT due to technical necessities. In specific cases, we may need to disclose your personal data to third-parties, such as our bank, if you are to receive a cost reimbursement or the post office, if we contact you by mail.
Legal basis for the data processing in the application procedure and as a component of the personal file are § 26 para. 1 s. 1 BDSG and Art. 6 para. 1 lit b GDPR and, if you have submitted consent, e.g. by submitting information unnecessary to the application process, Art. 6 para. 1 lit a GDPR. Legal basis for the data processing after a rejection is Art. 6 para. 1 lit f GDPR. Legal basis for the budgetary or tax retention is Art. 6 para. 1 lit. c GDPR in conjunction with § 147 AO. A legitimate interest in processing based on Art. 6 para. 1 lit f GDPR is the defence against legal claims. As a rule, we do not require any specific categories of personal data within meaning of Art. 9 GDPR. We ask you to please not send us any information of this sort. If such information is exceptionally relevant to the application process, we will process them together with your other application data. For example, this may include information about a severe disability, which you can voluntarily inform us on and that we then must process according to our specific obligations regarding the severely disabled. In these cases, the processing serves to exercise the right or to fulfil the legal obligations of labour laws, social security laws and social protection. Legal basis for data processing is then Art. 9 para. 2 lit. b GDPR, §§ 26 para. 3 BDSG, 164 SGB IX. As an exception, it may be necessary to obtain information about your health, a disability or information from the Federal Central Register, i.e. about previous convictions, in order to assess your suitability for the intended activity. Legal basis for this is § 26 BDSG.
Your data will not be used from our side for either automated decision-making or for profiling, nor will it be forwarded to a third-party. Your data will only be processed through us or on our behalf in Germany.
You have the following rights as a concerned person:
• Right to information (Art. 15 GDPR): You have the right to request confirmation from those responsible, as to whether your personal data is being processed; if this is the case, you have the right to information about this personal data.
• Right to rectification (Art. 16 GDPR): You have the right to demand immediate correction of incorrect personal data from those responsible and, if applicable, the completion of incomplete personal data.
• Right to deletion or restriction (Art. 18 GDPR) of processing: You have the right to demand that those responsible delete personal data relating to you immediately, for example when the data are no longer required for the intended purpose (right to deletion). The concerned person has the right to demand that those responsible restrict the processing of the data for the duration of the examination, e.g. if the person has submitted an objection to the processing.
•Right to object (Art. 21 GDPR): You have the right to object to the processing of your personal data at any given time due to reasons that may arise during your specific situation. The responsible persons will no longer process your personal data. That is unless, he/she can provide compelling reasons for the processing, which outweigh the interests, rights and freedoms of the concerned persons or the processing serves to assert, exercise or defend legal claims.
• Right to revoke (Art. 7 para. 3 GDPR): As long as the processing of your personal data is based on your consent, you have the right to revoke this consent at any time without affecting the legality of the processing carried out on the basis of consent until revocation.
• Right to appeal to the supervisory authority (Art. 77 GDPR): If the concerned person believes that the processing of his/her data violates the GDPR, there is the possibility of a complaint to the supervisory authority.
Der hessische Datenschutzbeauftragte, Gustav-Stresemann-Ring 1, 63589 Wiesbaden
• In addition, Art. 15 GDPR grants a right to information. According to this, the concerned person has the right to demand a confirmation from those responsible as to whether they will process personal data relating to them. If this is the case, then par. 1 s. 2 GDPR regulates the content of the information claim. This includes:
▪ purpose for the processing,
▪ the categories of the processed data,
▪ the recipient or category of recipient, to whom the data will be disclosed,
▪ the duration of the storage of the data or the criteria for determining this duration.
In order to safeguard your rights and to ensure the legally correct processing, we have appointed an external data protection officer. The contact details are:
gds – Gesellschaft für Datenschutz Mittelhessen mbH
06421 / 80413-10
10. Your rights
To the extent that the legal prerequisites are met, you have the right to obtain information about personal data or data processing concerning you (Art. 15 GDPR), rectification, erasure and restriction of personal data or data processing (Art. 16 to 18 GDPR) and transfers of personal data concerning you (Art. 20 GDPR).
In addition, if the statutory requirements under Art. 21 GDPR are met, you are entitled to a right of objection to data processing that is based on a "legitimate interest" of the controller in accordance with Art. 6 para. 1 subpara. 1 lit. f) GDPR.
To exercise these rights, or if you wish to revoke a consent to the processing of your personal data, in whole or in part, with future effect, please contact us under the email address email@example.com or the mailing address TB&C Holding GmbH, Junostraße 1, 35745 Herborn.
Furthermore, in accordance with Article 77 para. 1 GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your place of residence, employment or the place of the alleged infringement, if you consider that the processing of your personal data infringes the GDPR.
The address of the supervisory authority responsible in Hesse is:
Der Hessische Beauftragte für Datenschutz und Informationsfreiheit, P.O. Box: 3163, 65021 Wiesbaden, tel.: +49 611 1408 – 0, fax: +49 611 1408 – 611, email: firstname.lastname@example.org, website: https://datenschutz.hessen.de/.