dse-kontakte - www.EBZ-Group.com

Automotive.
Challenge Accepted!

Privacy policy applicable to business contacts and customers

Preamble

The following privacy policy applies to the Processing of Personal Data to the extent such data are processed by EBZ SE and its majority holdings with registered office within the European Union. Majority holdings of EBZ SE means legal persons in which EBZ SE directly or indirectly holds a participation of more than 50% (hereinafter collectively referred to as “EBZ Companies”). Annex A hereto contains a list of the EBZ Companies to which this privacy policy applies.

With this privacy policy, we would like to inform you of the types of Personal Data (hereinafter also referred to as “Data”) the EBZ Companies process and of the purposes and extent of the Processing.

The terms are used in gender-neutral form.

Revised: August 11, 2020

Controller


The Controller regarding the collection and use of your Personal Data is the EBZ Company to which you disclose and/or which collects and uses your Personal Data. The contact data of the EBZ Companies are listed in Annex A.

Contact data protection officer
Each EBZ Company appoints a data protection officer, provided this is required in accordance with applicable law. For any questions or statements regarding EBZ SE’s privacy policy or regarding the EBZ Companies listed in Annex A, please contact EBZ Group’s data protection coordinator, Charlotte Zormeier, who is at the same time the data protection officer of EBZ SE.

Name: Charlotte Zormeier
 
E-mail address: This email address is being protected from spambots. You need JavaScript enabled to view it.

Telephone: +49 (0)751 886-0

Governing legal bases

Hereinafter, we list the legal bases contained in the General Data Protection Regulation (GDPR) based on which we process Personal Data. Please note that the national data protection regulations applicable in your or in our country of residence/registered office may apply in addition to those contained in the GDPR.

  • Consent (Article 6(1)a of the GDPR): The Data Subject has given consent to the Processing of his or her Personal Data for one or more specific purposes;
  • Performance of contract and pre-contractual measures (Article 6(1)b of the GDPR): Processing is necessary for the performance of a contract to which the Data Subject is party or in order to take steps at the request of the Data Subject prior to entering into a contract;
  • Compliance with legal obligations (Article 6(1)c of the GDPR): Processing is necessary for compliance with a legal obligation to which the Controller is subject.
  • Legitimate interests (Article 6(1)f of the GDPR): Processing is necessary for the purposes of the legitimate interests pursued by the Controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the Data Subject which require protection of Personal Data.

Purposes of Processing

We process Personal Data in accordance with applicable laws and regulations and for the following purposes:

  • Purposes of processing based on the Data Subject’s consent (Article 6(1)a of the GDPR):
    To the extent you give your consent to the Processing of your Personal Data for specific purposes, the Processing of your Personal Data is lawful based on your consent. You may withdraw your consent at any time with future effect. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
  • Processing for the performance of a contract or in order to take steps prior to entering into a contract (Article 6(1)b of the GDPR):
    We process your Personal Data for the performance of a contract to which you are a party. The purposes of the Processing depend on the subject matter of contract. In addition, we process your Personal Data in order to take steps at your request prior to entering into a contract.
  • Purposes of Processing for compliance with a legal obligation (Article 6(1)c of the GDPR).
    We are subject to various legal obligations. The Processing of your Personal Data may be mandatory in order to comply with these legal obligations, e.g. regarding the statutory retention periods for business documents.
  • Purposes of Processing based on legitimate interests (Article 6(1)f of the GDPR)
    We process your Personal Data based on our legitimate interest in an efficient processing of business transactions for the following purposes: Pre-contractual measures and execution of contracts with legal persons (e.g. with your employer), planning and monitoring of business transactions, creation of statistics on resource planning and corporate management, ensuring that business transactions and communications of the EBZ Group of companies and their affiliated companies with third parties is unobjectionable.

We process your Personal Data based on our legitimate interest in the assertion and defense of our rights and in the fulfilment of our legal obligations for the following purposes: Ensuring information protection and operating ability of our IT systems, ensuring protection of our buildings and equipment, identification and rectification of compliance risks, protection and defense of our rights and detection, prevention and investigation of offenses.

We process your Personal Data based on our legitimate interest in the improvement of our products and services for the following purposes to the extent this is in compliance with data privacy and competition laws: Development and optimization of services and products, optimization of corporate processes and of IT systems.

We process your Personal Data based on our legitimate interest in the direct marketing for the following purposes to the extent this is in compliance with data privacy and competition laws: Initiation and management of business relationships, market and opinion research, planning and execution of marketing measures, direct marketing of our products and services, marketing communication. Marketing communication may be made via e-mail, telephone, letter, video conference, chat or messenger services. You may object to the Processing of your Personal Data for direct marketing and marketing communication at any time without any formal requirements.

Data categories for indirect data collection

We process Personal Data we received from you or from third parties. In addition, we process Personal Data that we lawfully took or received from public sources (e.g. press, internet and other media) and that we may lawfully process. This includes without limitation the following categories of data:

  • master data (e.g. name, address).
  • content data (e.g. entered texts, pictures, videos).
  • contract data (e.g. subject matter of contract, term of contract, customer category)
  • contact data (e.g. e-mail, telephone number);
  • organizational data (e.g. organization chart, superiors)
  • social media (e.g. link to a profile in a professional social network)
  • meta/communication data (e.g. e-mails, missed call)
  • payment data (e.g. banking information, invoices, payment history)
  • statistics (e.g. orders on hand, turnover).

Automated decision-making and profiling

We do not use any automated decision-making process in accordance with Article 22 of the GDPR. Should we decide to use such processes in future in individual cases, we will inform you if this is provided for by law.

Protection measures

In accordance with legal provisions and taking into consideration the state of technology, the implementation costs and the type, extent, circumstances and purposes of Processing and taking into account the different likelihoods and severity of the risk to the rights and freedoms of the Data Subject, we take suitable technical and organizational measures in order to ensure an appropriate level of security.

These measures include without limitation ensuring confidentiality, integrity and availability of data by monitoring physical and electronic access to the data and related access, entry, disclosure, availability and separation. In addition, we implemented processes that ensure that Data Subjects can exercise their rights, that data are erased, if required, and that we can quickly react to any threats to data security. Moreover, when developing and/or selecting hardware, software and processes, each in accordance with data protection regulations, we ensure the protection of Personal Data by design and by default.

Transmission and disclosure of Personal Data

The Processing of your Personal Data may include the transmission or disclosure of these data to other bodies, companies, legally independent organizations or persons. The recipients of your Personal Data may include without limitation public authorities, payment institutions in relation to payment transactions, service providers rendering IT services or providers of contents or services that are to be included into a website. In such case, we comply with statutory provisions, which means, including without limitation, that we conclude data privacy contracts and/or agreements with the recipients of your Personal Data.

Data transfer within the EBZ group of companies: We may transfer Personal Data to other EZB group companies or grant such companies access to these data. To the extent these data are transferred for administrative purposes, the legal basis therefor is our legitimate business and economic interests or the fulfilment of our contractual obligations or the Data Subject's consent or a legal authorization. For an overview of the EBZ group of companies please go to: https://www.ebz-group.com/en/ebz-group/locations.html

Data transmission within the organization: We may transfer Personal Data to other bodies within our organization or grant such bodies access to these data. To the extent these data are transferred for administrative purposes, the legal basis therefor is our legitimate business and economic interests or the fulfilment of our contractual obligations or on the Data Subject's consent or legal authorization.

Data Processing in third countries

Any Processing of your data in a third country, i.e. in a country that is not a member state of the European Union or of the European Economic Area, by us or by a service provider, or any disclosure or transfer of these data to other persons, bodies or companies, shall be strictly subject to applicable laws.

Unless you gave your express consent or the transfer of data is required based on contract or law, we only process your data (or have them processed) in third countries with an adequate level of protection, subject to appropriate safeguards, including without limitation contractual obligations based on the EU Commission’s so-called standard protection clauses or based on certifications or binding corporate rules (Articles 44 through 49 of the GDPR, website of the EU Commission (https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection_de).

Erasure of data

We erase all processed data in accordance with legal provisions as soon as the consent, based on which we process the data, is withdrawn or otherwise the authorization to process these data ceases to exist (e.g. if the purpose for which the data were processed ceases to exist of if the data are not required for the purpose). Personal Data relating to inactive business relationships will be erased two years after the last business activity at the latest.

The Processing of data that were not erased because they are required for other legally admissible purposes will be restricted to these purposes. This means these data will be blocked and not processed for any other purpose. This applies, without limitation, to data that must be kept for commercial or tax law reasons or for the assertion, execution or defense of legal claims or for the protection of the rights of another natural or legal person.

For more information on the erasure of Personal Data, please refer to the other data privacy statements contained in this privacy policy.

Change and update of the privacy policy

Please refer to the contents of this privacy policy in regular intervals, as we will adapt it to any required changes of our data processing activities. We will inform you of any action that you are required to take (e.g. giving your consent) or if any individual information is to be provided to you.

Please note that any addresses and contact information of companies and organizations we state in this privacy policy might change over time, so please check these contact data before using them.

Rights of Data Subjects

In accordance with the GDPR, Data Subjects have various rights, including without limitation based on Articles 15 through 18 and on Article 21 of the GDPR.

Right to object: You have the right to object, on grounds relating to your particular situation, at any time to the Processing of your Personal Data which is based on Article 6(1)e or f of the GDPR, including Profiling based on those provisions. Where your Personal Data are processed for direct marketing purposes, you shall have the right to object at any time to the Processing of your Personal Data for such marketing, which includes Profiling to the extent that it is related to such direct marketing;

  • Right to withdraw your consent: You are entitled to withdraw your consent to the Processing of your Personal Data at any time.
  • Right of access: You have the right to demand confirmation as to whether or not Personal Data concerning you are being processed, and, where that is the case, access to the Personal Data and additional information and a copy of these data based on statutory provisions.
  • Right to rectification: In accordance with statutory provisions, you have the right to demand the rectification of inaccurate Personal Data or to have incomplete Personal Data completed.
  • Right to erasure and to restriction of Processing: In accordance with statutory provisions you have the right to demand that your Personal Data be erased without delay and/or to demand restriction of Processing of your Personal Data.
  • Right to portability: In accordance with statutory provisions you have the right to receive the Personal Data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format or to demand transmission of those data to another Controller.
  • Right to lodge a complaint with a supervisory authority: In accordance with statutory provisions, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, place of work or place of the alleged infringement if you consider that the Processing of Personal Data relating to you infringes the regulations contained in the GDPR.

Definitions of terms

This section contains an overview of the terms used in this privacy policy. Many of these terms are taken from and defined in the GDPR, including without limitation in Article 4 thereof. The legal definitions are binding. The descriptions hereinafter are mainly for comprehension purposes.

  • Personal Data: “Personal Data” means any information relating to an identified or identifiable natural person (hereinafter referred to as the “Data Subject”). An identifiable natural person is a person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier (cookie) or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
  • Profiling: “Profiling” means any type of automated Processing of Personal Data where these Personal Data are used in order to analyze, evaluate or predict certain personal aspects relating to a natural person (e.g. the interest in certain contents or products, click behavior on a website or their location) (depending on the type of Profiling this includes without limitation the age, sex, location data, movement data, interaction with websites and their contents, purchase behavior, social interaction with other people). Cookies and web beacons are often used for Profiling purposes.
  • Controller: ”Controller” means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the Processing of Personal Data.
  • Processing: "Processing" means any operation or set of operations which is performed on Personal Data, whether or not by automated means. This term is very comprehensive and covers any handling of data, including without limitation collection, analysis, storage, transmission or erasure.


 

Annex A

 

  • EBZ SE
    Bleicherstr. 7

88212 Ravensburg      
Germany
Telephone: +49 (0)751 886-0

E-mail: This email address is being protected from spambots. You need JavaScript enabled to view it. 

  • EBZ Engineering Bausch & Ziege GmbH
    Bleicherstr. 7

88212 Ravensburg      
Germany
Telephone: +49 (0)751 886-0

E-mail: This email address is being protected from spambots. You need JavaScript enabled to view it. 

  • EBZ International GmbH
    Bleicherstr. 7

88212 Ravensburg      
Germany
Telephone: +49 (0)751 886-0

E-mail: This email address is being protected from spambots. You need JavaScript enabled to view it. 

  • EBZ Grundbesitz Wiesental GmbH & Co. KG
    Bleicherstr. 7

88212 Ravensburg

Germany

Telephone: +49 (0)751 886-0

E-mail: This email address is being protected from spambots. You need JavaScript enabled to view it. 

  • EBZ Grundbesitz Schemmerhofen GmbH & Co. KG
    Bleicherstr. 7

88212 Ravensburg

Germany

Telephone: +49 (0)751 886-0

E-mail: This email address is being protected from spambots. You need JavaScript enabled to view it. 

  • EBZ Ammerbuch GmbH
    Hagenring 21

72119 Ammerbuch-Altingen

Germany

Telephone: +49 (0)7032 9162-200

E-mail: This email address is being protected from spambots. You need JavaScript enabled to view it.  

  • EBZ Ravensburg GmbH
    Escher-Wyss-Str. 25

88212 Ravensburg

Germany

Telephone: +49 (0)751 886-0

E-mail: This email address is being protected from spambots. You need JavaScript enabled to view it. 

  • EBZ SysTec GmbH
    Bleicherstr. 7

88212 Ravensburg

Germany

Telephone: +49 (0)751 886-0

E-mail: This email address is being protected from spambots. You need JavaScript enabled to view it. 

  • EBZ NHC Composites GmbH

Adolf-Kolping-Str. 5

88433 Schemmerberg

Germany

Telephone: +49 (0)5308 4069-0       
E-mail: This email address is being protected from spambots. You need JavaScript enabled to view it.

  • EBZ Wolfsburg GmbH
    Bleicherstr. 7

88212 Ravensburg

Germany

Telephone: +49 (0)5308 4069-0       
E-mail: This email address is being protected from spambots. You need JavaScript enabled to view it. 

  • EBZ Bm FormTec GmbH
    Bleicherstr. 7

88212 Ravensburg

Germany

Telephone: +49 (0)751 886-0

E-mail: This email address is being protected from spambots. You need JavaScript enabled to view it. 

  • EBZ Grundbesitz Verwaltung GmbH
    Bleicherstr. 7

88212 Ravensburg

Germany

Telephone: +49 (0)751 886-0

E-mail: This email address is being protected from spambots. You need JavaScript enabled to view it. 

  • EBZ Grundbesitz GmbH & Co. KG
    Bleicherstr. 7

88212 Ravensburg

Germany

Telephone: +49 (0)751 886-0

E-mail: This email address is being protected from spambots. You need JavaScript enabled to view it. 

  • EBZ Grundbesitz Deisenfang GmbH
    Bleicherstr. 7

88212 Ravensburg

Germany

Telephone: +49 (0)751 886-0

E-mail: This email address is being protected from spambots. You need JavaScript enabled to view it.

  • EBZ Composites Hungary Kft.

Pócsi u. 104

4300 Nyírbátor  
Hungary

Telephone: +36 1 791-1088

E-mail: This email address is being protected from spambots. You need JavaScript enabled to view it.

  • EBZ Eng. Hungary Kft.

1117 Budapest,

Fehérvári út 50-52

Hungary

Tel +36 1 791-1088

E-mail This email address is being protected from spambots. You need JavaScript enabled to view it.

  • EBZ HOFFMANN s.r.o.

Dědina 959

687 22 Ostrožská Nová Ves  
Czech Republic

Telephone: +420 572 420 644

E-mail: This email address is being protected from spambots. You need JavaScript enabled to view it.        

  • EBZ SysTec UK Ltd.
    Park Business Centre

Hastingwood Industrial Park

Suite 2N2, Wood Lane

Birmingham, B24 9QR

Telephone: +44 (0)121 647-3557     
E-mail: This email address is being protected from spambots. You need JavaScript enabled to view it.

  • EBZ Automation Engineering Sp. z o.o.

        ul. Zabrska 17

44-100 Gliwice

Poland

Tel +48 327 755-707

E-mail This email address is being protected from spambots. You need JavaScript enabled to view it.

  • EBZ Design Engineering Sp. z o.o.

        ul. Tkacka 55

70-556 Stettin

Poland

Tel +48 (0)91 350-8512

E-mail This email address is being protected from spambots. You need JavaScript enabled to view it.