Name and contact details of the controller (Art. 13 para. 1 lit. a GDPR)
IMO Oberflächentechnik GmbH
Remchinger Straße 5
D-75203 Königsbach-Stein
Phone: +49 7232 3006-0
E-mail: info(at)imo-gmbh.com
Contact details of the data protection officer (Art. 13 para. 1 lit. b GDPR)
ENSECUR GmbH
Kaiserstraße 86
76133 Karlsruhe
E-mail: dsb-imo@ensecur.de
Personal data such as name, address or e-mail address is collected solely for the purpose of providing a service, for example in the context of an online application or when using the contact form. Any information you provide on a voluntary basis will be used exclusively for the purpose for which you have given it to us. Personal data is processed solely on the basis of Art. 5 GDPR.
For statistical and system-related purposes, our web servers store every access in a log file when you visit and retrieve the content provided. The log file comprises the following information:
This data is stored for security reasons, for example to prevent attempted attacks on our web servers. The stored IP address is only analysed in the event of an attack on our system (Art. 6 para. 1 lit. f GDPR). The stored user data cannot be assigned to a natural person. The data is deleted by the system at regular intervals.
If you have any questions, for example about our products, you can use the contact form provided on our website or you can contact us by e-mail. When you use the contact form, we process the information you provide (mandatory fields of the contact form: first name, last name, e-mail address) to process your enquiry and any queries you may have on the basis of our compelling legitimate interest (point (f) of Art. 6(1) GDPR). Your data will only be used for the purpose of fulfilling your enquiry and then deleted as long as there is no legal, contractual or statutory obligation to retain it.
We offer applicants the option to apply for our advertised positions online. When you use the application form, we process the information you provide (mandatory fields of the contact form: first name, last name, e-mail address, application documents) within the applicant selection procedure (point (b) of Art. 6(1) GDPR). After completing the applicant selection procedure, your applicant data will be deleted within six months if your application has been rejected.
Our website is hosted by our marketing agency, Markentrainer Werbeagentur GmbH, Pfinztalstraße 24, 76227 Karlsruhe. This means that data is transferred to Markentrainer and various data processing operations take place directly on the servers of Markentrainer. The data is transferred to Markentrainer on the basis of our legitimate interest in the reliable presentation of our website pursuant to point (f) of Art. 6(1) GDPR.
We have concluded an order processing agreement with Markentrainer. An order processing agreement is a specialist data protection agreement which ensures that Markentrainer only processes the personal data of visitors to our website according to our instructions and in compliance with the General Data Protection Regulation.
We use a “Consent Manager”, which ensures that processing based on your consent only takes place after you have given us your express consent. For this purpose, we use the Borlabs service from Borlabs GmbH, Hamburger Straße 11, 22083 Hamburg. The Consent Manager allows us to obtain and manage the consent of website users to the processing of their data. In this case, the processing is necessary for compliance with a legal obligation (sent. 1 of point (c) of Art. 6(1) GDPR). The following data is processed with the use of cookies:
This information and the status of your consent are stored as a cookie in the browser for one year. This means that your decision is retained for subsequent visits to our website. Your personal data will be progressively erased after 12 months or immediately subsequent to the termination of the contract between us and Borlabs.
The lawful functioning of the website is not possible without the use of a Consent Manager. The processing takes place on servers in the European Union.
This website uses the open source web analysis service Matomo. Matomo uses so-called “cookies” which are text files that are stored on your computer and that make it possible to analyse your use of the website. The information generated by the cookie about your use of this website is stored on servers in Germany. The purpose of this storage is to analyse the activities on the website in order to optimise the website offer on the basis of our legitimate interest (Art. 6 para. 1 lit. f GDPR). Matomo immediately anonymises your IP address, making it impossible to identify you personally and ensuring that you remain anonymous to us. You can prevent the storage of cookies by configuring the settings in your browser software accordingly. However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. If you do not agree to the data arising from your visit being stored and processed, you can prevent subsequent storage or usage with a single mouse click at any time. In this case a so-called opt-out cookie is stored in your browser, which means that Matomo does not collect any session data. Please note that the complete deletion of your cookies means that the opt-out cookie is also deleted and you may have to activate it again.
This site uses the Google Maps service via an API. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. Google Maps is only used if you consent to its use via the Consent Manager (point (a) of Art. 6(1) GDPR and Section 25 (1) of the Telecommunications Digital Services Data Protection Act (hereinafter: TDDDG). No data about you as a user will be transferred to Google Maps unless you explicitly consent to this. Your IP address will only be transferred if you have consented to the use of Google Maps on our website. The IP address is necessary to ensure the correct functioning of Google Maps. This information is usually transferred to a server in the USA and stored there. We base this transfer of data on the EU-US Data Privacy Framework.
We have no influence on the data processing by Google. Further information on the use of user data can be found in the privacy policy of Google: https://policies.google.com/privacy?hl=de&gl=de
To increase the loading speed of our website and to improve user-friendliness we use the jQuery Javascript library on this website on the basis of our compelling legitimate interest (point (f) of Art. 6(1) GDPR). We use the CDN (Content Delivery Network) from Google to load this library. When you visit our website, your browser loads the external JavaScript file from the server ajax.googleapis.com. If you have already used jQuery on another Google CDN page, your browser can access the copy stored in the cache and it does not have to be downloaded again. If your browser does not have a cached copy, or the file needs to be downloaded from Google CDN for some other reason, data will be sent from your browser to Google Inc. (“Google”). You can find further privacy notices and information about Google’s data processing at: https://www.google.de/intl/en/policies/privacy/
This website uses so-called social plugins of the social network facebook.com, which is operated by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. The plugins are identifiable by a Facebook logo (white “f” on a blue background or a “thumbs up” sign) or are identified by the phrase “Facebook social plugin”. The list and the look of Facebook social plugins can be viewed here:
https://developers.facebook.com/docs/plugins/page-plugin
Facebook plugins are only used if you consent to their use via the Consent Manager (point (a) of Art. 6(1) GDPR and Section 25 (1) TDDDG). With your consent, your browser establishes a direct connection to the Facebook servers. The content of the plugin is transferred from Facebook directly to your browser, which then embeds it into the website.
By embedding the plugin, Facebook receives the information that you have accessed the corresponding page of our website. If you are logged into Facebook, Facebook can assign the visit to your Facebook account. Please note that the information is exchanged as soon as the plugins are enabled, regardless of whether or not you interact with the plugins. If you interact with the plugins, for example by clicking the “Like” button or by submitting a comment, the corresponding information is transmitted directly from your browser to Facebook and stored there.
The personal data transferred may also be transferred to Meta servers in the USA. As the parent company of Meta Platforms Ireland, Meta Platforms Inc. is certified pursuant to the EU-U.S. Data Privacy Framework (DPF). This certification confirms that Meta ensures an adequate level of data protection in accordance with European Union standards.
For further information on the purpose and scope of data collection, further processing and use of the data by Facebook as well as your setting options to protect your privacy, please refer to Facebook’s Privacy Policy under https://www.facebook.com/policy.php.
On our website, we use social plugins of the social network instagram.com, which is operated by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. The plugins are identifiable by the Instagram logo or the phrase “Instagram social plugin”.
Instagram plugins are only used if you consent to their use via the Consent Manager (point (a) of Art. 6(1) GDPR and Section 25 (1) TDDDG). With your consent, your browser establishes a direct connection to the Instagram servers. The content of the plugin is transferred from Instagram directly to your browser, which then embeds it into the website. By embedding the plugin, Instagram receives the information that you have accessed the corresponding page of our website. If you are logged into Instagram, Instagram can assign the visit to your Instagram account. Please note that this information is exchanged as soon as the plugins are enabled, regardless of whether you interact with the plugins or not. If you interact with the plugins, by clicking the Instagram button, for example, the corresponding information is transferred directly from your browser to Instagram and stored there.
The personal data transferred may also be transferred to Meta servers in the USA. As the parent company of Meta Platforms Ireland, Meta Platforms Inc. is certified pursuant to the EU-U.S. Data Privacy Framework (DPF). This certification confirms that Meta ensures an adequate level of data protection in accordance with European Union standards.
For information on the purpose and scope of the data collection, the further processing and use of the data by Instagram and your settings options to protect your privacy, please refer to the privacy policy of Instagram at https://help.instagram.com/519522125107875/?helpref=hc_fnav&bc[0]=Instagram-Hilfebereich&bc[1]=Privatsph%C3%A4re%20und%20Sicherheit.
This website uses plugins of the LinkedIn network, which is operated by the LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. The LinkedIn plugins are only used if you consent to their use via the Consent Manager (point (a) of Art. 6(1) GDPR and Section 25 (1) TDDDG). If you provide your consent, the content of this plugin is transferred directly to your browser, which then embeds it into the website. By embedding the plugin, LinkedIn receives the information that you have accessed our website from your IP address. Please note that the information is exchanged as soon as the plugins are enabled, regardless of whether or not you interact with the plugins. If you interact with the plugins, for example by clicking the “Recommend” button, the corresponding information is transmitted directly from your browser to LinkedIn and stored there. If you are logged into LinkedIn, LinkedIn can assign the visit to your LinkedIn user account.
The personal data transferred may also be transferred to servers in the USA. LinkedIn is certified pursuant to the EU-U.S. Data Privacy Framework (DPF). This certification confirms that LinkedIn ensures an adequate level of data protection in accordance with European Union standards.
For information on how to change your LinkedIn privacy settings, please visit https://www.linkedin.com/legal/privacy-policy.
The “XING Share Button” of the XING network is used on this website, which is operated by New Work SE, Am Strandkai 1, 20457 Hamburg, Germany. When you access this website, your browser temporarily establishes a connection to the XING servers, with which the “XING Share Button” features are enabled (in particular the calculation/display of the counter value). XING does not store any personal data about you when you access this website. In particular, XING does not store any IP addresses. Your user behaviour is not evaluated via the use of cookies in connection with the “XING Share Button”. The respective current data protection information on the “XING Share Button” feature and additional information can be found on this website: https://www.xing.com/app/share?op=data_protection
We embed videos from the YouTube platform on our website. The provider of YouTube is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
YouTube videos are embedded to provide you with multimedia content and to make our website more appealing. YouTube is embedded on the basis of your consent in accordance with point (a) of Art. 6(1) GDPR, which we obtain via a consent banner. No YouTube content will be loaded without your consent.
When you visit a page with an embedded YouTube video, a connection to the YouTube servers is established. The YouTube server is also informed about which of pages you have visited. If you are logged into your YouTube account, YouTube can assign your surfing behaviour directly to your personal profile. You can prevent this from happening by logging out of your YouTube account. YouTube can also store or read cookies or similar technologies on your device if you have consented to this. Personal data may also be transferred to Google servers in the USA. As the parent company of YouTube, Google is certified according to the EU-U.S. Data Privacy Framework (DPF). This certification confirms that Google ensures an adequate level of data protection in accordance with European Union standards.
Further information on data protection at YouTube is available in the privacy policy of Google at
https://policies.google.com/privacy.
We operate a company page on the Facebook platform, a service of Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter “Facebook”). We make express reference to the fact that you use the Facebook page and its features at your own risk.
a) Purpose of the processing and legal basis
Our Facebook page is used to communicate with interested parties and the users of our offers and to provide information about our company and services. We process your data on the basis of our legitimate interest in communicating with you and improving our visibility pursuant to point (f) of Art. 6(1) GDPR.
Our compelling legitimate interest lies in effectively and specifically addressing our target groups and in improving our offers and our visibility on a widely used platform.
b) Data processing by Facebook
When you visit our Facebook page, Facebook also processes your personal data. This consists of:
This data can be processed by Facebook for its own purposes, e.g. to analyse user behaviour and to display personalised advertising. We have no influence on the data processing by Facebook.
Our Facebook page offers you the opportunity to send us messages, to react to our posts or to comment on them. Therefore, please check which personal data you would like to share with us on the company page. If you do not want your personal data to be transferred to Meta, you can contact us at any time in another way (e.g. via the website, address, etc.).
The privacy policy of Meta Platforms applies to the data processing by Facebook (https://www.facebook.com/privacy/policy).
c) Facebook Insights
When visitors use our company’s Facebook page, Meta Platforms Ireland Limited (Facebook) provides us with Page Insights. These consist of anonymised statistical information which Meta creates based on the visitors’ interactions with our Facebook page. The legal basis for the use of these Facebook Insights is our legitimate interest pursuant to point (f) of Art. 6(1) GDPR in analysing the use of our page and improving it to the benefit of visitors who are interested in our company.
We are jointly responsible for the processing of Insights data together with Facebook. You can view the agreement on the joint responsibility at the following link: https://www.facebook.com/legal/terms/page_controller_addendum.
d) Transfer of data to third countries
Meta Platforms may transfer your data to the USA or other third countries. Please note that these countries may not have a level of data protection which is comparable to that in the EU. Meta Platforms ensures an appropriate level of data protection in accordance with the requirements of the GDPR through certification according to the EU-U.S. Data Privacy Framework (DPF) and the use of the Standard Contractual Clauses (SCCs) of the European Commission. Further information on the data processing and the protective measures applied is available in the privacy policy of Meta at: https://www.facebook.com/about/privacy.
e) Storage period
The Data Controller only has limited influence on the erasure of personal data, as this is largely determined by Facebook. Further information on this is available at https://www.facebook.com/privacy/policy. Insofar far as personal data is provided to us during the course of interactions (e.g. messages), we will only store such data for as long as this is necessary for the purposes of the communication.
f) Your rights
You can assert your right of access, rectification, objection, data portability and to the erasure of your data vis-à-vis both us and Facebook (Meta Platforms). Please note that Facebook (Meta Platforms) holds the primary responsibility for the processing of the Insights data. You can find out more information about your rights as a data subject at Facebook at the following link: https://de-de.facebook.com/privacy/policy).
g) Requirement to provide personal data
You provide the collected data to us or Facebook (Meta) voluntarily. If you do not want your data to be processed, you should not visit our Facebook page.
For information on the purpose and scope of the data collection, the further processing and use of the data by Facebook and your settings options to protect your privacy, please refer to the privacy policy of Facebook (https://www.facebook.com/about/privacy/).
We operate a company page (also known as an Instagram Business Account) on the Instagram platform, a service of Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter”).
We make express reference to the fact that you use the Instagram page and its features at your own risk.
a) Purpose of the processing and legal basis
Our Instagram page is used to communicate with interested parties and the users of our offers, and to provide information about our company and services. We process your data on the basis of our legitimate interest in communicating with you and improving our visibility pursuant to point (f) of Art. 6(1) GDPR.
Our compelling legitimate interest lies in effectively and specifically addressing our target groups and in improving our offers and our visibility on a widely used platform.
b) Data processing by Instagram
When you visit our Instagram page, Meta Platforms also processes your personal data. This consists of:
This data can be processed by Meta Platforms for its own purposes, e.g. to create user profiles and for personalised advertising. We have no influence on the data processing by Instagram.
Our Instagram page offers you the opportunity to send us messages, to react to our posts or to comment on them. Therefore, please check which personal data you would like to share with us on the company page. If you do not want your personal data to be transferred to Meta, you can contact us at any time in another way (e.g. via the website, address, etc.).
The privacy policy of Meta Platforms applies to the data processing by Instagram (https://privacycenter.instagram.com/policy/).
c) Instagram Insights
We use the “Instagram Insights” feature, which provides us with anonymised statistics about the use of our Instagram page. These statistics are based on personal data that Instagram collects about your interactions with our page.
The legal basis for the use of Instagram Insights is our legitimate interest pursuant to point (f) of Art. 6(1) GDPR in analysing the use of our page and improving it to the benefit of visitors who are interested in our company.
We are jointly responsible for the operation of our Instagram page together with Meta Platforms Ireland Limited. You can view the agreement on the joint responsibility (“Page Controller Addendum”) at the following link: https://www.facebook.com/legal/terms/page_controller_addendum.
d) Transfer of data to third countries
Meta Platforms may transfer your data to the USA or other third countries. Please note that these countries may not have a level of data protection which is comparable to that in the EU. Meta Platforms ensures an appropriate level of data protection in accordance with the requirements of the GDPR through certification according to the EU-U.S. Data Privacy Framework (DPF) and the use of the Standard Contractual Clauses (SCCs) of the European Commission. Further information on the data processing and the protective measures applied is available in the privacy policy of Meta at: https://privacycenter.instagram.com/policy.
e) Storage period
The Data Controller only has limited influence on the erasure of personal data, as this is largely determined by Meta. Further information on this is available at https://privacycenter.instagram.com/policy. Insofar far as personal data is provided to us during the course of interactions (e.g. messages), we will only store such data for as long as this is necessary for the purposes of the communication.
f) Your rights
You can assert your right of access, rectification, objection, data portability and to the erasure of your data vis-à-vis both us and Meta Platforms. Please note that Meta Platforms holds the primary responsibility for the processing of the Insights data. You can find out more information about your rights as a data subject at Instagram at the following link: https://privacycenter.instagram.com/policy.
g) Requirement to provide personal data
You provide the collected data to us Instagram (Meta) voluntarily. If you do not want your data to be processed, you should not visit our Instagram page.
For information on the purpose and scope of data collection, the further processing and use of the data by Instagram and your settings options to protect your privacy, please refer to the privacy policy of Instagram (https://privacycenter.instagram.com/policy).
We use LinkedIn as a social network to enter into contact and communicate with different groups of people. LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland is generally responsible for the processing of personal user data on the web pages of LinkedIn.
If you visit our LinkedIn pages, LinkedIn processes certain information about you, even if you do not have a LinkedIn user account or you are not logged into LinkedIn at all. LinkedIn informs you about how it processes your data in the privacy policy of LinkedIn at https://www.linkedin.com/legal/privacy-policy?trk=d_org_guest_company_overview_footer-privacy-policy. As the operator of our LinkedIn page, we can view your public profile on LinkedIn. What we can see in it depends on the settings you have made in your personal profile. If you contact us via our LinkedIn page, we will process your name and the content of your messages, enquiries or other comments made towards us for the purpose of processing your comments accordingly and, if necessary, responding to them. Depending on the enquiry with which you contact us, we will process your personal data in accordance with our legitimate interest pursuant to point (f) of Art. 6(1) GDPR or point (b) of Art. 6(1) GDPR if your enquiry has the objective of concluding a contract with us.
LinkedIn provides us with Page Analytics data. This data consists of anonymous statistics that we can use to evaluate the quality of our LinkedIn page and our content. LinkedIn collects usage data about your interactions on our LinkedIn page and uses it to generate statistics. We have no access to the usage data. Joint responsibility for the processing of the Page Analytics data exists, to which this agreement applies (https://legal.linkedin.com/pages-joint-controller-addendum). In this agreement, LinkedIn undertakes to take the corresponding responsibility vis-à-vis us and to safeguard the rights of data subjects according to the GDPR. The legal basis for this data processing is our legitimate interest in better understanding how users interact with our LinkedIn page (e.g. number of followers, number of views of individual page areas, user statistics by age, geography and language) and in being able to adapt and improve our page to suit our target group accordingly pursuant to point (f) of Art. 6(1) GDPR. We will store your personal data on our systems, i.e. outside of LinkedIn, if and for as long as it is required for the purposes of the data collection or in the case of statutory retention periods.
It is possible that LinkedIn Ireland Unlimited Company may transfer some of the data collected to other LinkedIn companies located outside the European Union, such as the LinkedIn Corporation and its US subsidiaries (“LinkedIn”) that are based in the USA. To ensure an adequate level of data protection, LinkedIn bases such data transfers on the Standard Contractual Clauses of the European Commission. The LinkedIn Corporation is also an active participant in the EU-US Data Privacy Framework since February 2024.
If you would like to exercise your rights as a data subject vis-à-vis LinkedIn, please contact LinkedIn directly. The link provided above takes you to a contact form that you can use to contact LinkedIn. In other cases, please use the contact options provided at the start of this Privacy Policy.
We use XING as a social network to enter into contact and communicate with different groups of people and to inform you about our company, our services and our news. The company New Work SE, Am Strandkai 1, 20457 Hamburg, Germany, is generally responsible for the processing of personal user data on the web pages of XING.
When you visit our XING page, XING assumes responsibility for processing certain information from you, even if you do not have a XING user account or are not logged in. We have no influence over the processing of data by XING and also have no access to such data. XING informs you about how your data is processed in its privacy policy, which is available at https://privacy.xing.com/de/datenschutzerklaerung. If you would like to exercise your rights as a data subject vis-à-vis XING, please contact XING directly. Further information about this is available through the above link.
As the operator of our XING page, we only process your data to the extent that we are able to view the data in your public profile on XING. The specific information which is visible to us depends on your profile settings. If you contact us via our XING page, we will process your name and the content of your messages, enquiries or other comments for the purpose of processing these and, if necessary, responding to them. We are solely responsible for processing such data. Depending on the respective matter, your personal data will be processed either on the basis of our legitimate interest pursuant to sent. 1 of point (f) of Art. 6(1) GDPR, or pursuant to sent. 1 of point (b) of Art. 6(1) GDPR if your enquiry has the objective of concluding a contract. We will only store your personal data on our systems if and for as long as it is required for the purposes of the processing or in the case of statutory retention periods. If you wish to assert your rights as a data subject vis-à-vis us, please use the contact options provided in this Privacy Policy.
Data processing by YouTube
We use a YouTube channel, which is part of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. We make express reference to the fact that you use the YouTube channel offered here and its features at your own risk. This applies in particular to the use of the “Discussion” feature.
Information about which data is processed by Google and for what purposes is available in the privacy policy of Google:
https://policies.google.com/privacy?hl=de&gl=de#infocollect
When you use YouTube, your personal data will be collected, transferred, stored, disclosed, used and, regardless of your place of residence, transferred to the United States, Ireland or any other country in which Google does business, and stored and used there. It will also be transferred to companies that are affiliated with Google and to other trusted companies or persons who process it on Google’s behalf.
Google processes the data that you enter voluntarily, such as your name and user name, email address and telephone number. Google also processes the content that you create, upload or receive from others when using the services. This includes, for example, photos and videos that you save, documents and spreadsheets that you create, and comments that you add to YouTube videos. In addition, Google also evaluates the content you share to determine which topics you are interested in, stores and processes confidential messages that you send directly to other users, and is able to determine your location using GPS data, information about wireless networks, or via your IP address. Google does this primarily to send you advertising or other content.
Google may use analysis tools such as Google Analytics for evaluation purposes. We have no influence over the use of such tools by Google, and we have not been informed of any such potential use. If Google uses such tools for the YouTube channel, we have neither commissioned this nor supported it in any way. Furthermore, the data obtained during the analysis is not made available to us. We are only able to view certain profiles, in particular the profiles of the subscribers to our YouTube channel. In addition, we have no way of preventing or disabling the use of such analysis tools on our YouTube channel.
Finally, Google also receives information when you view content for example, even if you have not created a (Google) account. This “log data” generally includes the IP address, browser type, operating system, information about the previously accessed website and the web pages you have viewed, your location, your mobile phone provider, the device you are using (including device ID and application ID), the search terms you use and cookie information.
We have no influence over the type or the scope of the data processed by Google, the type of processing or use or transfer of this data to third parties. We also have no effective control options in this respect. Options are available to you for restricting the processing of your data in the general settings of your Google account and in the “Privacy and Security” section. In addition to these tools, Google also offers specific data protection settings for YouTube. Further information about this is available in the guide to data protection provided by Google in Google Products: https://policies.google.com/technologies/product-privacy?hl=de&gl=de
Further information about these points can be found in the Privacy Policy of Google under the term “privacy settings”: https://policies.google.com/privacy?hl=de&gl=de#infochoices
You can also request information with the use of the Google data protection form: https://support.google.com/policies/troubleshooter/7575787?visit_id=637054532384299914-2421490167&hl=de&rd=2
Data processing by IMO
We will also process your data if you communicate with us via YouTube.
The data you enter on YouTube, in particular your user name and the content posted in your account, will only be processed by us should we respond to any content you post under “Discussions”.
The data you post freely and disseminate on YouTube is therefore included in our offering and made accessible to our followers. This constitutes a legitimate interest on our part (point (f) of Art. 6(1) GDPR). Otherwise, visitors’ personal data will only be processed beyond this if it is necessary for the processing of an enquiry or a comment.
The recipient of the data is initially Google, who may also forward it to third parties for its own purposes and within the scope of its own responsibility. The recipient of posted content is also the public, i.e. potentially anyone.
This website uses CleverReach for the sending of newsletters. The provider is CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede. CleverReach is a service that manages and analyses the sending of newsletters. The data that you entered for the purpose of receiving the newsletter (e. g. your e-mail address) will be saved on CleverReach servers in Germany and/or Ireland.
Sending our newsletters through CleverReach allows us to analyse the actions of our newsletter subscribers. For example, we can analyse how many recipients opened the newsletter message and how often the individual links in the newsletters were clicked. In addition, conversion tracking is used to analyse whether the click on a newsletter link was followed by a previously defined action (e. g. the purchase of a product on our website). For more information on the data analysis performed by the CleverReach newsletter, go to: https://www.cleverreach.com/de/funktionen/reporting-und-tracking/.
The data processing is based on your consent (Article 6(1)(a) GDPR). You can withdraw your consent at any time by unsubscribing from the newsletter. The lawfulness of the data processing already performed remains unaffected by the withdrawal.
If you wish to refuse the CleverReach analysis, please unsubscribe from the newsletter. Each newsletter message contains a link that can be used for this purpose. Additionally, you can also go to our website to unsubscribe from the newsletter.
The data you provided for the purpose of receiving the newsletter will be stored by us for as long as you receive the newsletter; after you unsubscribe from the newsletter, the data will be erased from our servers as well as the CleverReach servers. This does not affect any data stored by us for other purposes (e. g. e-mail addresses for the members-only section).
For more details, please refer to the CleverReach data protection policy at: https://www.cleverreach.com/de/datenschutz/.
Conclusion of a data processor contract
We concluded a contract with CleverReach as data processor on our behalf; in using CleverReach, we are fully compliant with the strict provisions set forth by the German data protection agencies.
Name and contact details of the controller (Art. 13 para. 1 lit. a GDPR)
IMO Oberflächentechnik GmbH
Remchinger Str. 5
75203 Königsbach-Stein
E-mail: info@imo-gmbh.com
Contact details of the data protection officer (Art. 13 para. 1 lit. b GDPR)
ENSECUR GmbH
Kaiserstraße 86
76133 Karlsruhe
E-mail: dsb-imo@ensecur.de
Purpose and legal basis of data processing (Art. 13 para. 1 c GDPR)
*Interests of the controller when weighing up interests (Art. 13 para. 1 d GDPR)
Recipients or categories of recipients of personal data (Art. 13 para. 1 e GDPR)
Public authorities, banks, auditors, software manufacturers, associated companies, waste disposal service providers, advertising agency, IT service providers, suppliers/service providers
Data transmission to third countries (Art. 13 para. 1 f GDPR)
No data is transmitted to third countries.
Storage period in accordance with statutory retention requirements (Art. 13 para. 2 a GDPR)
As a rule, personal data is erased within ten years following termination of the contractual relationship or earlier should an interested party not become a customer. This does not apply to individual contractual regulations pertaining to longer retention periods agreed with customers.
Existence of a requirement to provide personal data (Art. 13 para. 2 e GDPR)
The data collected is required for the processing of enquiries from interested parties, the preparation of offers and the conclusion of purchase contracts or the conduct of business operations.
Purpose and legal basis of data processing (Art. 13 para. 1 c GDPR)
Purchase and management of support services for fulfilling business purposes (Art. 6 para. 1 f GDPR)*
Fulfilment of legal obligations (Art. 6 para. 1 c GDPR)
Sending information material (Art. 6 para. 1 b GDPR)
*Interests of the controller when weighing up interests (Art. 13 para. 1 d GDPR)
Asserting legal claims and defence in legal disputes
Ensuring the IT security and IT operation of the company
Prevention of criminal offences
Measures for business management and further development of services and products
Recipients or categories of recipients of personal data (Art. 13 para. 1 e GDPR)
Authorities, banks, auditors, waste disposal service providers, software manufacturers, affiliated companies, IT service providers.
Data transmission to third countries (Art. 13 para. 1 f GDPR)
No data is transmitted to third countries.
Storage period in accordance with statutory retention requirements (Art. 13 para. 2 a GDPR)
As a rule, personal data is erased within ten years following termination of the business relationship, unless in exceptional cases a longer statutory storage period exists or in the event of revocation by the person concerned.
Existence of a requirement to provide personal data (Art. 13 para. 2 e GDPR)
The data collected is required for the initiation, implementation and termination of business relationships.
Purpose and legal basis of data processing (Art. 13 para. 1 c GDPR)
Processing of applications/e-recruiting (Section 26 para. 1 BDSG-new)
Inclusion in an applicants’ pool for contact at a later date (Art. 6 para. 1 a GDPR)
Interests of the controller when weighing up interests (Art. 13 para. 1 d GDPR)
Not applicable.
Recipients or categories of recipients of personal data (Art. 13 para. 1 e GDPR)
Personnel service provider, provider of the software-supported applicant portal, waste disposal service provider.
Data transmission to third countries (Art. 13 para. 1 f GDPR)
No data is transmitted to third countries.
Storage period in accordance with statutory retention requirements (Art. 13 para. 2 a GDPR)
Personal data will be erased six months after completion of the application process in accordance with Section 61b (1) of the German Labour Court Act (ArbGG) in conjunction with Section 15 of the German General Act on Equal Treatment (AGG). If the applicant is accepted in the applicant pool, erasure takes place after 2 years if no suitable position can be offered.
In the event of employment, the required data is transferred to the personnel file. Information on the erasure of data is available under the duty of information on employee data processing.
Existence of a requirement to provide personal data (Art. 13 para. 2 e GDPR)
The data collected is required for the application procedure. If the data is not provided, it is not possible to perform the application procedure.
Right to access, rectification, erasure, restriction, data portability and objection (Art. 13 para. 2 b GDPR)
As data subject you have the right at any time to request access to your data, rectification and erasure of your data, and restriction of processing, as well as a right to data portability. In order to exercise these rights, please contact the controller using the contact details provided.
Right to withdraw consent (Art. 13 para. 2 c GDPR)
If you have consented to the processing of your data, you have the right to withdraw such consent at any time with effect for the future. This does not affect the lawfulness of the processing up to the time consent is withdrawn. In order to exercise this right, please contact the controller using the contact details provided.
Right to lodge a complaint (Art. 13 para. 2 d GDPR)
As a data subject, you can contact the responsible State Commissioner for Data Protection and Freedom of Information in Baden-Württemberg at any time if you have any complaints.
Right to object (Art. 21 para. 1 GDPR)
Insofar as the processing of your data is carried out to protect legitimate interests, you have the right to object to this processing at any time using the contact details provided if reasons arise from your particular situation that conflict with this data processing. We will then cease such processing unless it serves compelling legitimate interests on our part.
We implement appropriate technical and organisational security measures to protect your personal data against accidental or intentional tampering, loss, destruction or access by unauthorised persons. These security measures are subject to continuous improvement in line with technological developments.
To ensure that our Privacy Policy always complies with the current legal requirements, we reserve the right to make amendments at any time. This also applies in the event that the Privacy Policy needs to be updated as a result of new or revised services. The new Privacy Policy will then take effect on your next visit to our website.
Last updated on: 28.02.25
Remchinger Straße 5
75203 Königsbach-Stein
Deutschland
Tel.: +49 7232 3006-0
E-Mail: info@imo-gmbh.com
Remchinger Straße 5
75203 Königsbach-Stein
Germany
Tel.: +49 7232 3006-0
E-Mail: info@imo-gmbh.com