Privacy policy

IMO Oberflächentechnik GmbH

We attach great importance to the protection of personal data. We therefore process personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and other statutory provisions. By means of the following notes in our Privacy Policy, we would like to provide you with extensive information regarding the handling of your personal data and your relevant rights in this respect.

NOTE ON THE RESPONSIBLE AUTHORITY

Name and contact details of the controller (Art. 13 para. 1 lit. a GDPR)
IMO Oberflächentechnik GmbH
Remchinger Straße 5
D-75203 Königsbach-Stein

Phone: +49 7232 3006-0
E-mail: info(at)imo-gmbh.com

 

Contact details of the data protection officer (Art. 13 para. 1 lit. b GDPR)
ENSECUR GmbH
Kaiserstraße 86
76133 Karlsruhe
E-mail: dsb-imo@ensecur.de

1. Processing purposes

pursuant to Art. 6 GDPR

Personal data such as name, address or e-mail address is collected solely for the purpose of providing a service, for example in the context of an online application or when using the contact form. Any information you provide on a voluntary basis will be used exclusively for the purpose for which you have given it to us. Personal data is processed solely on the basis of Art. 5 GDPR.

1.1 Processing of user data upon access to our homepage (Art. 6 para. 1 lit. f GDPR)

 

For statistical and system-related purposes, our web servers store every access in a log file when you visit and retrieve the content provided. The log file comprises the following information:

  • IP address, time stamp (date and time of access) of the requesting computer
  • Web pages/file names accessed
  • Web browser and operating system of the requesting computer
  • Data volume transferred and notification of successful retrieval

This data is stored for security reasons, for example to prevent attempted attacks on our web servers. The stored IP address is only analysed in the event of an attack on our system (Art. 6 para. 1 lit. f GDPR).
The stored user data cannot be assigned to a natural person. The data is deleted by the system at regular intervals.

1.2 Using the contact form (Art. 6 para. 1 lit. b GDPR)

 

If you have any questions, for example about our products, you can use the contact form provided on our website or you can contact us by e-mail. When you use the contact form, we process the information you provide (mandatory fields of the contact form: first name, last name, e-mail address) to process your enquiry and any queries you may have (Art. 6 para. 1 lit. b / f alt. 2 GDPR). Your data will only be used for the purpose of fulfilling your enquiry and then deleted as long as there is no legal, contractual or statutory obligation to retain it.

1.3 Online application (Section 26 para. 1 BDSG-new)

 

We offer applicants the option to apply for our advertised positions online. When you use the application form, we process the information you provide (mandatory fields of the contact form: first name, last name, e-mail address, application documents) within the applicant selection procedure (Section 26 para. 1 BDSG-new). After completing the applicant selection procedure, your applicant data will be deleted within six months if your application has been rejected.

2. Integration of third-party

services and content

2.1 Cookies

 

We use so-called “cookies” on our website. Cookies are small text files that are stored on your computer and saved by your browser. We use cookies to make our website more user-friendly, efficient and secure (Art. 6 para. 1 lit. f GDPR). If you do not wish to use cookies, you can configure your browser settings to prevent the storage of cookies.

2.2 Matomo

 

This website uses the open source web analysis service Matomo. Matomo uses so-called “cookies” which are text files that are stored on your computer and that make it possible to analyse your use of the website. The information generated by the cookie about your use of this website is stored on servers in Germany. The purpose of this storage is to analyse the activities on the website in order to optimise the website offer on the basis of our legitimate interest (Art. 6 para. 1 lit. f GDPR). Matomo immediately anonymises your IP address, making it impossible to identify you personally and ensuring that you remain anonymous to us. You can prevent the storage of cookies by configuring the settings in your browser software accordingly. However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.
If you do not agree to the data arising from your visit being stored and processed, you can prevent subsequent storage or usage with a single mouse click at any time. In this case a so-called opt-out cookie is stored in your browser, which means that Matomo does not collect any session data. Please note that the complete deletion of your cookies means that the opt-out cookie is also deleted and you may have to activate it again.

2.3 Google Maps

 

This site uses the Google Maps map service via an API. It is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Maps is embedded in an extended data protection mode, i.e. no data on you as the user will be transmitted to Google Maps if you do not use the service. Only when you use Google Maps on our website will your IP address be transmitted. The IP address is necessary to ensure the functionality of Google Maps. This information is usually transferred to a Google LLC server in the USA and stored there. We have no influence on the transmission of this data.
Google Maps is used in the interest of an appealing presentation of our online offers and to make our locations easy to find. This represents an overriding legitimate interest on our part as defined in Art. 6 para. 1 lit. f GDPR.
For more information on the handling of user data, please review Google’s Privacy Policy: https://policies.google.com/privacy?hl=en&gl=de

2.4 Youtube

 

On the basis of our legitimate interest (Art. 6 para. 1 lit. f GDPR), we use a YouTube plugin for the integration of videos, which is operated by Youtube, based in LLC 901 Cherry Ave, San Bruno, CA 94066, USA. The videos are stored at http://www.YouTube.com and can be played directly from our website. These videos are all embedded in “extended data protection mode”, i.e. no data on you as the user will be transmitted to YouTube if you do not play the videos. Only when you play the videos will the data specified in the next paragraph be transmitted. We have no influence on the transmission of this data.
When you visit our website, YouTube is informed that you have visited the corresponding subpage of our website. In addition, the data specified in this Privacy Policy is transmitted. This is done irrespectively of whether YouTube provides a user account that you are logged into or you do not have a user account. If you are logged into Google, your data will be directly associated with your account. If you do not want YouTube to associate your actions with your profile, you must log out before activating the button. YouTube stores your data as user profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is conducted in particular (even for users who are not logged in) in order to provide advertising tailored to the user and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube in order to exercise this right.
You can find more information on the purpose and scope of the collection and processing of data by YouTube in its Privacy Policy. This policy also provides you with further information on your rights and the settings that you can use to protect your privacy: https://www.google.de/intl/en/policies/privacy.

2.5 Use of jQuery

 

To increase the loading speed of our website and to improve user-friendliness we use the jQuery Javascript library on this website. We use the CDN (Content Delivery Network) from Google to load this library. When you visit our website, your browser loads the external JavaScript file from the server ajax.googleapis.com. If you have already used jQuery on another Google CDN page, your browser can access the copy stored in the cache and it does not have to be downloaded again. If your browser does not have a cached copy, or the file needs to be downloaded from Google CDN for some other reason, data will be sent from your browser to Google Inc. (“Google”). You can find further privacy notices and information about Google’s data processing at: https://www.google.de/intl/en/policies/privacy/

3. Integration of

social networks

3.1 Facebook Social Plugins

 

This website uses so-called social plugins of the social network facebook.com, which is operated by Facebook Inc., 1601 South California Avenue, Palo Alto, CA 94304, USA. The plugins are identifiable by a Facebook logo (white “f” on a blue background or a “thumbs up” sign) or are identified by the phrase “Facebook social plugin”. The list and the look of Facebook social plugins can be viewed here:
https://developers.facebook.com/docs/plugins/page-plugin
When you access a page on our website containing a plugin of this kind, your browser establishes a direct link to the Facebook servers. The content of the plugin is transferred from Facebook directly to your browser, which then embeds it into the website.
By embedding the plugin, Facebook receives the information that you have accessed the corresponding page of our website. If you are logged into Facebook, Facebook can assign the visit to your Facebook account. Please note that the information is exchanged when you visit this website, regardless of whether or not you interact with the plugins. If you interact with the plugins, for example by clicking the “Like” button or by submitting a comment, the corresponding information is transmitted directly from your browser to Facebook and stored there.
For further information on the purpose and scope of data collection, further processing and use of the data by Facebook as well as your setting options to protect your privacy, please refer to Facebook’s Privacy Policy under https://www.facebook.com/policy.php.
If you do not want Facebook to collect data about you via our website, you must log out of Facebook before you visit our website.

3.2 Twitter Plugins

 

Our website integrates plugins of the short messaging network Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA. You can recognise the Twitter plugins (tweet button) by the Twitter logo on our website. For an overview of the tweet button, please refer to: http://dev.twitter.com/.
When you visit our website, the plugin establishes a direct link between your web browser and the Twitter server. Twitter thereby receives the information that you have visited our website from your IP address. If you click on the Twitter “tweet button” while logged into your Twitter account, you can link the content of our pages to your Twitter profile. This allows Twitter to associate the visit to our pages with your user account. Please note that, as the provider of this website, we are not aware of the content of the data transmitted to Twitter or of how Twitter uses this data. For further information, please refer to Twitter’s Privacy Policy at http://twitter.com/privacy.
You can change your Twitter privacy settings in the account settings at http://twitter.com/account/settings.
If you do not want Twitter to associate your visit to our website with your Twitter user account, please log out of your Twitter user account.

3.3 LinkedIn

 

This website uses plugins of the LinkedIn network, which is operated by the LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. When you access a page on our website containing a plugin of this kind, the content of this plugin will be transmitted directly to your browser and embedded into the website. By embedding the plugin, LinkedIn receives the information that you have accessed our website from your IP address. Please note that the information is exchanged when you visit this website, regardless of whether or not you interact with the plugins. If you interact with the plugins, for example by clicking the “Recommend” button, the corresponding information is transmitted directly from your browser to LinkedIn and stored there. If you are logged into LinkedIn, LinkedIn can assign the visit to your LinkedIn user account.
For information on how to change your LinkedIn privacy settings, please visit https://www.linkedin.com/legal/privacy-policy.

3.4 Xing

 

This website uses the “XING Share Button”. When you access this website, your browser temporarily establishes a connection to the XING SE (“XING”) servers, with which the “XING Share Button” features are enabled (in particular the calculation/display of the counter value). XING does not store any personal data about you when you access this website. In particular, XING does not store any IP addresses. Your user behaviour is not evaluated via the use of cookies in connection with the “XING Share Button”. The respective current data protection information on the “XING Share Button” feature and additional information can be found on this website:
https://www.xing.com/app/share?op=data_protection

4. Data collection

Newsletter

 4.1 Cleverreach

This website uses CleverReach for the sending of newsletters. The provider is CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede. CleverReach is a service that manages and analyses the sending of newsletters. The data that you entered for the purpose of receiving the newsletter (e. g. your e-mail address) will be saved on CleverReach servers in Germany and/or Ireland.
Sending our newsletters through CleverReach allows us to analyse the actions of our newsletter subscribers. For example, we can analyse how many recipients opened the newsletter message and how often the individual links in the newsletters were clicked. In addition, conversion tracking is used to analyse whether the click on a newsletter link was followed by a previously defined action (e. g. the purchase of a product on our website). For more information on the data analysis performed by the CleverReach newsletter, go to: https://www.cleverreach.com/de/funktionen/reporting-und-tracking/.
The data processing is based on your consent (Article 6(1)(a) GDPR). You can withdraw your consent at any time by unsubscribing from the newsletter. The lawfulness of the data processing already performed remains unaffected by the withdrawal.
If you wish to refuse the CleverReach analysis, please unsubscribe from the newsletter. Each newsletter message contains a link that can be used for this purpose. Additionally, you can also go to our website to unsubscribe from the newsletter.
The data you provided for the purpose of receiving the newsletter will be stored by us for as long as you receive the newsletter; after you unsubscribe from the newsletter, the data will be erased from our servers as well as the CleverReach servers. This does not affect any data stored by us for other purposes (e. g. e-mail addresses for the members-only section).
 For more details, please refer to the CleverReach data protection policy at: https://www.cleverreach.com/de/datenschutz/.


 

Conclusion of a data processor contract
We concluded a contract with CleverReach as data processor on our behalf; in using CleverReach, we are fully compliant with the strict provisions set forth by the German data protection agencies.

5. Information requirements

pursuant to Art. 13 GDPR

5.1 Contact details for all groups concerned

Name and contact details of the controller (Art. 13 para. 1 lit. a GDPR)

IMO Oberflächentechnik GmbH
Remchinger Str. 5
75203 Königsbach-Stein
E-mail: info@imo-gmbh.com

Contact details of the data protection officer (Art. 13 para. 1 lit. b GDPR)
ENSECUR GmbH
Sophienstraße 25
70178 Stuttgart
E-mail: dsb-imo@ensecur.de

 

5.2 Information requirements for interested parties and customers

Purpose and legal basis of data processing (Art. 13 para. 1 c GDPR)

*Interests of the controller when weighing up interests (Art. 13 para. 1 d GDPR)

Recipients or categories of recipients of personal data (Art. 13 para. 1 e GDPR)

Public authorities, banks, auditors, software manufacturers, associated companies, waste disposal service providers, advertising agency, IT service providers, suppliers/service providers

 

Data transmission to third countries (Art. 13 para. 1 f GDPR
No data is transmitted to third countries.

 

Storage period in accordance with statutory retention requirements (Art. 13 para. 2 a GDPR)
As a rule, personal data is erased within ten years following termination of the contractual relationship or earlier should an interested party not become a customer. This does not apply to individual contractual regulations pertaining to longer retention periods agreed with customers.

 

Existence of a requirement to provide personal data (Art. 13 para. 2 e GDPR)

The data collected is required for the processing of enquiries from interested parties, the preparation of offers and the conclusion of purchase contracts or the conduct of business operations.

 

5.3 Information requirements for suppliers and service providers

Purpose and legal basis of data processing (Art. 13 para. 1 c GDPR)

Purchase and management of support services for fulfilling business purposes (Art. 6 para. 1 f GDPR)*
Fulfilment of legal obligations (Art. 6 para. 1 c GDPR)

Sending information material (Art. 6 para. 1 b GDPR)

*Interests of the controller when weighing up interests (Art. 13 para. 1 d GDPR)

Asserting legal claims and defence in legal disputes

Ensuring the IT security and IT operation of the company

Prevention of criminal offences

Measures for business management and further development of services and products

Recipients or categories of recipients of personal data (Art. 13 para. 1 e GDPR)

Authorities, banks, auditors, waste disposal service providers, software manufacturers, affiliated companies, IT service providers.

Data transmission to third countries (Art. 13 para. 1 f GDPR)

No data is transmitted to third countries.

​Storage period in accordance with statutory retention requirements (Art. 13 para. 2 a GDPR)

As a rule, personal data is erased within ten years following termination of the business relationship, unless in exceptional cases a longer statutory storage period exists or in the event of revocation by the person concerned.

​Existence of a requirement to provide personal data (Art. 13 para. 2 e GDPR)

The data collected is required for the initiation, implementation and termination of business relationships.

 

5.4 Information requirements for applicants

Purpose and legal basis of data processing (Art. 13 para. 1 c GDPR)

Processing of applications/e-recruiting (Section 26 para. 1 BDSG-new)
Inclusion in an applicants’ pool for contact at a later date (Art. 6 para. 1 a GDPR)

Interests of the controller when weighing up interests (Art. 13 para. 1 d GDPR)

Not applicable.

Recipients or categories of recipients of personal data (Art. 13 para. 1 e GDPR)

Personnel service provider, provider of the software-supported applicant portal, waste disposal service provider.

Data transmission to third countries (Art. 13 para. 1 f GDPR)

No data is transmitted to third countries.

Storage period in accordance with statutory retention requirements (Art. 13 para. 2 a GDPR)

Personal data will be erased six months after completion of the application process in accordance with Section 61b (1) of the German Labour Court Act (ArbGG) in conjunction with Section 15 of the German General Act on Equal Treatment (AGG). If the applicant is accepted in the applicant pool, erasure takes place after 2 years if no suitable position can be offered.
In the event of employment, the required data is transferred to the personnel file. Information on the erasure of data is available under the duty of information on employee data processing.

Existence of a requirement to provide personal data (Art. 13 para. 2 e GDPR)

The data collected is required for the application procedure. If the data is not provided, it is not possible to perform the application procedure.

 

5.5 Rights of all groups concerned

Right to access, rectification, erasure, restriction, data portability and objection (Art. 13 para. 2 b GDPR)

As data subject you have the right at any time to request access to your data, rectification and erasure of your data, and restriction of processing, as well as a right to data portability. In order to exercise these rights, please contact the controller using the contact details provided.

Right to withdraw consent (Art. 13 para. 2 c GDPR)

If you have consented to the processing of your data, you have the right to withdraw such consent at any time with effect for the future. This does not affect the lawfulness of the processing up to the time consent is withdrawn. In order to exercise this right, please contact the controller using the contact details provided.

Right to lodge a complaint (Art. 13 para. 2 d GDPR)

As a data subject, you can contact the responsible State Commissioner for Data Protection and Freedom of Information in Baden-Württemberg at any time if you have any complaints.

Right to object (Art. 21 para. 1 GDPR)

Insofar as the processing of your data is carried out to protect legitimate interests, you have the right to object to this processing at any time using the contact details provided if reasons arise from your particular situation that conflict with this data processing. We will then cease such processing unless it serves compelling legitimate interests on our part.

 

5.6 Security

We implement appropriate technical and organisational security measures to protect your personal data against accidental or intentional tampering, loss, destruction or access by unauthorised persons. These security measures are subject to continuous improvement in line with technological developments.

6. Amendments to our

privacy policy

To ensure that our Privacy Policy always complies with the current legal requirements, we reserve the right to make amendments at any time. This also applies in the event that the Privacy Policy needs to be updated as a result of new or revised services. The new Privacy Policy will then take effect on your next visit to our website.

Last updated on: 25.05.22

Imo Oberflächentechnik Gmbh

Remchinger Straße 5
75203 Königsbach-Stein
Deutschland

Tel.: +49 7232 3006-0

E-Mail: info@imo-gmbh.com

IMO Oberflächentechnik Gmbh

Remchinger Straße 5
75203 Königsbach-Stein
Germany

Tel.: +49 7232 3006-0

E-Mail: info@imo-gmbh.com